CVE-2026-89808

A flaw was found in the drm/amdkfd component of the Linux kernel. During virtual memory (VM) migration, if a VM range is a 'hole' on the CPU side, an uninitialized variable is used. This can cause the system to drop all Video Random Access Memory (VRAM), potentially leading to a denial of service or system instability for a local attacker.

This vulnerability is rated with a Low severity impact because exploiting it requires local privileges, specialized AMD graphics hardware running the amdgpu driver, and specific GPU shared virtual memory operations. On systems with compatible AMD GPUs, an authenticated local user interacting with the compute interface can cause the driver to prematurely release allocated video memory, resulting in a denial of service for GPU-bound workloads. Typical Red Hat Enterprise Linux server installations lack discrete AMD compute hardware or restrict direct access to GPU render nodes, significantly limiting exposure in standard environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.