CVE-2026-23358

A flaw was found in the Linux kernel's drm/amdgpu driver. During slot reset error handling, the system could attempt to access an uninitialized list due to an uninitialized pointer. This could lead to system instability or a denial of service.

This vulnerability is rated with a Low severity because it requires a local attacker on a system equipped with AMD GPU hardware actively utilizing the amdgpu driver, and can only be triggered during exceptional hardware failure recovery scenarios. Exploitation requires an unrecovered PCIe slot reset condition to trigger an invalid list access, resulting in a local denial of service through a system crash. Enterprise environments running headless server configurations or deployments lacking AMD graphic cards are not exposed to this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.