CVE-2026-31462
kernel: drm/amdgpu: prevent immediate PASID reuse case
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · April 22, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's drm/amdgpu component. This vulnerability arises from the immediate reuse of a Process Address Space ID (PASID) when a process exits. If a new process is assigned a recently freed PASID, it may encounter page faults still pending in the interrupt handler (IH) ring buffer, which can lead to interrupt issues. This can result in system instability or a denial of service.
Statement
This vulnerability is rated with a Moderate severity because exploitation requires local access and is constrained to systems equipped with AMD graphics hardware utilizing the amdgpu kernel module. On affected configurations, rapid termination and creation of processes utilizing GPU resources can trigger race conditions with unprocessed interrupts in hardware buffers, leading to a kernel crash or system denial of service. Systems without AMD GPU devices or where the amdgpu driver is not loaded are unaffected by this flaw.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition