{"schema":"threatline.record/2","record":{"id":"CVE-2026-97928","aliases":[],"summary":"drm/amdgpu: skip the VMID 0 flush for VRAM","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: skip the VMID 0 flush for VRAM\n\nClear-on-release only runs on VRAM, which amdgpu_ttm_map_buffer() reaches\nvia its direct MC address without programming a GART window, yet the wipe\nstill forces a VMID 0 flush. On GFX11 (e.g. Navi33) that spurious SDMA\nflush can wedge the engine; only flush when a GART window is actually used.\n\nv2: Let amdgpu_ttm_map_buffer() return whether the VMID 0 flush is needed,\n    and drive the clear and copy paths from that. (Christian)\nv3: Make the vm_needs_flush output parameter mandatory instead of\n    allowing NULL. (Christian)\n\n(cherry picked from commit a306e406e570b74318ff7d80e5b07b540ca1d3a9)","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97928","source_modified_at":"2026-10-21T12:53:39.969Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"a68c7eaa7a8ffdec9287ba1561a668d674c20a13","lessThan":"6593494733ccaf691db7bd13801583d188409607","status":"affected","versionType":"git"},{"version":"a68c7eaa7a8ffdec9287ba1561a668d674c20a13","lessThan":"30dacb56f07283a1acb353ce81baef31f85396b0","status":"affected","versionType":"git"},{"version":"a68c7eaa7a8ffdec9287ba1561a668d674c20a13","lessThan":"241d7450cf75969cea450eb3e740cb9682f69c2f","status":"affected","versionType":"git"},{"version":"a68c7eaa7a8ffdec9287ba1561a668d674c20a13","lessThan":"87ceb8cba73d0b3c4025ff42495bccd8164acaed","status":"affected","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97928","source_modified_at":"2026-10-21T12:53:39.969Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"6.10","status":"affected"},{"version":"0","lessThan":"6.10","status":"unaffected","versionType":"semver"},{"version":"6.12.114","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.57","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2.7","lessThanOrEqual":"7.2.*","status":"unaffected","versionType":"semver"},{"version":"7.3","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97928","source_modified_at":"2026-10-21T12:53:39.969Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"6593494733ccaf691db7bd13801583d188409607","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97928","source_modified_at":"2026-10-21T12:53:39.969Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"30dacb56f07283a1acb353ce81baef31f85396b0","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97928","source_modified_at":"2026-10-21T12:53:39.969Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"241d7450cf75969cea450eb3e740cb9682f69c2f","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97928","source_modified_at":"2026-10-21T12:53:39.969Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"87ceb8cba73d0b3c4025ff42495bccd8164acaed","basis":"first unaffected version stated in the CVE record"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":0.002,"percentile":0.09338,"score_date":"2026-10-23"},"published_at":"2026-09-25T10:22:45.430Z","modified_at":"2026-10-21T12:53:39.969Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-97928","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-21T12:53:39.969Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-97928","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/6593494733ccaf691db7bd13801583d188409607"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/30dacb56f07283a1acb353ce81baef31f85396b0"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/241d7450cf75969cea450eb3e740cb9682f69c2f"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/87ceb8cba73d0b3c4025ff42495bccd8164acaed"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-21T12:53:39.969Z","content_hash":"fbfe92db951da6e724d3e592695bc959c481b782403ff1377949198f7ab0245d"}}