CVE-2026-89809

A flaw was found in the drm/amdkfd component of the Linux kernel. A local user can trigger a system crash by reading the /sys/kernel/debug/kfd/mqds file while a process holds an active Kernel Fusion Driver (KFD) queue. This issue arises from a NULL pointer dereference, where a critical variable is used before it is properly initialized, leading to a Denial of Service (DoS).

This vulnerability is rated as having Low severity for Red Hat Enterprise Linux because debugfs (/sys/kernel/debug) is accessible only to privileged users (root) by default, significantly limiting exposure to unprivileged local attackers. Exploitation also requires active Kernel Fusion Driver queues associated with AMD GPU hardware to trigger the null pointer condition. Consequently, unprivileged users cannot cause a denial of service on standard deployments without administrative privileges or explicitly relaxed filesystem permissions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.