CVE Database›CVE-2026-31462

CVE-2026-31462

kernel: drm/amdgpu: prevent immediate PASID reuse case

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · April 22, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's drm/amdgpu component. This vulnerability arises from the immediate reuse of a Process Address Space ID (PASID) when a process exits. If a new process is assigned a recently freed PASID, it may encounter page faults still pending in the interrupt handler (IH) ring buffer, which can lead to interrupt issues. This can result in system instability or a denial of service.

Statement

This vulnerability is rated with a Moderate severity because exploitation requires local access and is constrained to systems equipped with AMD graphics hardware utilizing the amdgpu kernel module. On affected configurations, rapid termination and creation of processes utilizing GPU resources can trigger race conditions with unprocessed interrupts in hardware buffers, leading to a kernel crash or system denial of service. Systems without AMD GPU devices or where the amdgpu driver is not loaded are unaffected by this flaw.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition