CVE-2026-23264
kernel: Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem"
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · March 18, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's AMD GPU driver. On systems configured with multiple graphics processing units where only one device supports Active State Power Management (ASPM), improper evaluation of ASPM settings can lead to kernel instability. A local user could exploit this condition to cause a system crash, resulting in a Denial of Service (DoS).
Statement
This vulnerability is rated as having a Low impact for Red Hat Enterprise Linux because it requires a highly specific and uncommon multi-GPU hardware configuration to trigger. Exploitation demands local system access and is restricted to environments with mixed AMD graphics adapters where Active State Power Management support differs between installed devices. Typical enterprise servers and virtualized deployments do not utilize disparate dual AMD GPU hardware, thereby substantially limiting real-world exposure to this kernel denial-of-service condition.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-1108 · Excessive Reliance on Global Variables