CVE-2026-81015
kernel: platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 11, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's AMD PMC (Power Management Controller) driver. When the amd_stb_s2d_init() function fails during the driver's initialization process, it can lead to unreleased resources, specifically the LPS0 s2idle handler and debugfs directory. This resource leak can corrupt internal lists, potentially causing a kernel crash and a denial of service if the module is reloaded. Additionally, stale registrations can lead to issues during subsequent system suspend-to-idle transitions.
Statement
amd_pmc_probe can leave the LPS0 s2idle handler and debugfs directory registered when amd_stb_s2d_init fails late in probe. The stale LPS0 registration remains on a global ACPI list while devm managed driver state may be torn down, so a later module reload can hit list corruption and a later s2idle transition can call into invalid driver state. For the CVSS the PR:L is used for the paranoid score because a local user or service may be able to trigger suspend or related power management paths after the failed probe state exists, although reliable creation of that failed probe state is usually administrative. The issue is not network reachable. Impact is at least a local denial of service via kernel BUG or crash and in worst case may allow limited confidentiality or integrity impact due to stale pointer use and should be reviewed manually.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime