CVE-2026-89827

A flaw was found in the Linux kernel's drm/amdgpu component. The uvd_v7_0_sw_init() function, responsible for initializing the UVD (Unified Video Decoder) ring, does not properly set up the decode ring for an SR-IOV (Single Root I/O Virtualization) Virtual Function (VF). This can lead to the amdgpu_uvd_resume() function attempting to force-complete an uninitialized decode ring when restoring its fence sequence, potentially causing system instability or a denial of service.

The AMDGPU UVD resume path can call amdgpu_fence_driver_force_completion for a decode ring whose fence driver was never initialized for an SR-IOV VF. Using this incomplete ring state can violate fence driver assumptions and may cause a warning or a host kernel crash during GPU resume or recovery. For the CVSS the PR:L value is used for the paranoid score because a restricted tenant or process with access to an assigned VF may be able to influence GPU workloads and recovery without having full host administrative privileges. Reliable triggering still depends on an SR-IOV VF configuration and on reaching the UVD resume or reset path, so AC:H is appropriate. The issue is not directly network reachable. The demonstrated impact is denial of service against the host, while the available code does not establish a UAF, information leak, or write primitive that would justify confidentiality or integrity impact.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.