CVE-2026-53293
kernel: drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 26, 2026
Updated · November 2, 2026
Description
A flaw was found in the Linux kernel's AMDGPU graphics driver. Multiple issues exist within the AMDGPU_INFO_READ_MMR_REG function, including an incorrect order of operations between the reset semaphore and the memory management lock, and memory allocation while holding the reset semaphore. These issues can lead to a system deadlock, resulting in a Denial of Service (DoS) for affected systems.
Statement
This vulnerability is rated as Moderate severity because it requires local access to an AMD graphics device to trigger lock contention, restricting the blast radius to a localized denial of service without compromising host data confidentiality or integrity. In standard Red Hat Enterprise Linux environments, headless servers and systems lacking AMD GPU hardware do not initialize the driver and remain unaffected. The risk is further constrained as triggering the flaw requires local users to issue specific control queries to active AMD display hardware.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-833 · Deadlock