CVE Database›CVE-2026-23264

CVE-2026-23264

kernel: Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem"

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · March 18, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's AMD GPU driver. On systems configured with multiple graphics processing units where only one device supports Active State Power Management (ASPM), improper evaluation of ASPM settings can lead to kernel instability. A local user could exploit this condition to cause a system crash, resulting in a Denial of Service (DoS).

Statement

This vulnerability is rated as having a Low impact for Red Hat Enterprise Linux because it requires a highly specific and uncommon multi-GPU hardware configuration to trigger. Exploitation demands local system access and is restricted to environments with mixed AMD graphics adapters where Active State Power Management support differs between installed devices. Typical enterprise servers and virtualized deployments do not utilize disparate dual AMD GPU hardware, thereby substantially limiting real-world exposure to this kernel denial-of-service condition.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-1108 · Excessive Reliance on Global Variables