All vulnerabilities
CVE-2026-97928

Linux: drm/amdgpu: skip the VMID 0 flush for VRAM

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.20%Chance of exploitation activity in the next 30 days, higher than 9% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in6593494733ccaf691db7bd13801583d188409607Also 30dacb56f07283a1acb353ce81baef31f85396b0, 241d7450cf75969cea450eb3e740cb9682f69c2f and 1 moreCVE List
Published25 Sep 2026Updated 21 Oct 2026CVE List

What fixes it

  • 6593494733ccaf691db7bd13801583d188409607LinuxCVE List
  • 30dacb56f07283a1acb353ce81baef31f85396b0LinuxCVE List
  • 241d7450cf75969cea450eb3e740cb9682f69c2fLinuxCVE List
  • 87ceb8cba73d0b3c4025ff42495bccd8164acaedLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: skip the VMID 0 flush for VRAM

Clear-on-release only runs on VRAM, which amdgpu_ttm_map_buffer() reaches via its direct MC address without programming a GART window, yet the wipe still forces a VMID 0 flush. On GFX11 (e.g. Navi33) that spurious SDMA flush can wedge the engine; only flush when a GART window is actually used.

v2: Let amdgpu_ttm_map_buffer() return whether the VMID 0 flush is needed, and drive the clear and copy paths from that. (Christian) v3: Make the vm_needs_flush output parameter mandatory instead of allowing NULL. (Christian)

(cherry picked from commit a306e406e570b74318ff7d80e5b07b540ca1d3a9)

Text from CVE List

Affected versions 10

  • Linuxaffected: a68c7eaa7a8ffdec9287ba1561a668d674c20a13 before 6593494733ccaf691db7bd13801583d188409607CVE List
  • Linuxaffected: a68c7eaa7a8ffdec9287ba1561a668d674c20a13 before 30dacb56f07283a1acb353ce81baef31f85396b0CVE List
  • Linuxaffected: a68c7eaa7a8ffdec9287ba1561a668d674c20a13 before 241d7450cf75969cea450eb3e740cb9682f69c2fCVE List
  • Linuxaffected: a68c7eaa7a8ffdec9287ba1561a668d674c20a13 before 87ceb8cba73d0b3c4025ff42495bccd8164acaedCVE List
  • Linuxaffected: 6.10CVE List
  • Linuxunaffected: all versions before 6.10CVE List
  • Linuxunaffected: 6.12.114 through 6.12.*CVE List
  • Linuxunaffected: 6.18.57 through 6.18.*CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 4