Skip to main content
← All vulnerabilities
CVE-2026-89827

drm/amdgpu: avoid force-completing uninitialized UVD rings

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 6.6.160, 6.12.112, 6.18.53, 7.2.5
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid force-completing uninitialized UVD rings uvd_v7_0_sw_init() does not initialize the UVD decode ring for an SR-IOV VF. However, amdgpu_uvd_resume() unconditionally force-completes the decode ring when restoring its fence sequence. Skip fence completion when the fence driver is not initialized.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 0a33b11d26c6b7e975b54d469a739ffac29f67ab · fixed in 668cfb8ab3e22c10fe74307aac86b3cf456d6923; From 0a33b11d26c6b7e975b54d469a739ffac29f67ab · fixed in 863f08c485fbb51b6443681893e4044c7cb6cd51; From 0a33b11d26c6b7e975b54d469a739ffac29f67ab · fixed in dc136795f9997adc8d3219f40e8e3afa7df7183f; From 0a33b11d26c6b7e975b54d469a739ffac29f67ab · fixed in 967a179463d3227dfaf9200fd654c1f5a26a11e8; From 0a33b11d26c6b7e975b54d469a739ffac29f67ab · fixed in 6760f5cb12d2366ddd58a2d8637f7583d73f596b

  • Linux Linux

    6.5

  • KernelLinux

    From 6.5.0 · fixed in 6.6.160; From 6.7.0 · fixed in 6.12.112; From 6.13.0 · fixed in 6.18.53; From 6.19.0 · fixed in 7.2.5

References 5

git.kernel.org