CVE-2026-89814

A flaw was found in the Linux kernel's drm/amdgpu component. This vulnerability occurs when a graphics ring is not assigned to a partition, leading to an out-of-bounds array access during SDMA submissions. A local attacker could potentially exploit this to cause a system crash, resulting in a denial of service (DoS).

This vulnerability is rated as having Moderate impact because triggering the flaw requires local user access, specialized AMD graphics hardware, and the blast radius is limited to a kernel panic leading to denial of service. In typical Red Hat Enterprise Linux enterprise deployments, systems operate without dedicated AMD GPUs or run headless, meaning the affected driver is neither active nor loaded by default. Even on hardware equipped with AMD graphics, exploitation requires an authenticated local user submitting workloads through unpartitioned rings to induce the invalid memory index.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.