CVE-2026-97928
Received Received - Intake

AMDGPU VMID 0 Flush Bypass Vulnerability

Vulnerability report for CVE-2026-97928, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip the VMID 0 flush for VRAM Clear-on-release only runs on VRAM, which amdgpu_ttm_map_buffer() reaches via its direct MC address without programming a GART window, yet the wipe still forces a VMID 0 flush. On GFX11 (e.g. Navi33) that spurious SDMA flush can wedge the engine; only flush when a GART window is actually used. v2: Let amdgpu_ttm_map_buffer() return whether the VMID 0 flush is needed, and drive the clear and copy paths from that. (Christian) v3: Make the vm_needs_flush output parameter mandatory instead of allowing NULL. (Christian) (cherry picked from commit a306e406e570b74318ff7d80e5b07b540ca1d3a9)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves an unnecessary VMID 0 flush in the AMD GPU driver (amdgpu) when handling VRAM. The flush operation can cause the engine to hang on certain hardware like GFX11 (Navi33) due to a spurious SDMA flush.

Detection Guidance

This vulnerability is specific to the Linux kernel's AMD GPU driver and may not have direct network detection methods. Check kernel logs for AMD GPU-related errors or hangs, especially on GFX11 hardware like Navi33. Commands like dmesg | grep amdgpu or journalctl -k | grep amdgpu may help identify issues.

Impact Analysis

The vulnerability may cause system instability or crashes when using AMD GPUs on affected hardware. It could lead to graphics rendering failures or system freezes during GPU-intensive tasks.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this AMD GPU driver issue. If using a distribution kernel, apply available patches immediately. Monitor AMD GPU performance and stability after updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97928. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart