CVE-2026-74450

A flaw was found in the Linux kernel's AMD GPU power management component. This vulnerability, known as a use-after-free, occurs when the system attempts to access memory that has already been released. A local attacker could potentially exploit this flaw to cause a system crash (denial of service) or, in more severe scenarios, execute arbitrary code with elevated privileges.

A use-after-free exists in the AMDGPU power management pp_table sysfs path because amdgpu_dpm_get_pp_table returns a driver-owned power table pointer after releasing adev pm mutex. The sysfs read path can then copy from that stale pointer while a concurrent pp_table write replaces and frees the allocation. This can crash the kernel and can also expose stale kernel memory through the sysfs read buffer if the freed allocation is reused before the copy. For the CVSS the PR:L is used for the paranoid score because reliable triggering may be possible for a local user or delegated GPU management service that can access the pp_table write path, although the default sysfs write permission is usually administrator-only. The issue is not network reachable. Impact is at least local denial of service and information disclosure, and worst-case use-after-free behavior should be reviewed for privilege escalation risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.