CVE-2026-90286

A flaw was found in the Linux kernel's AMD GPU (Graphics Processing Unit) driver, specifically affecting GFX6 series GPUs. This vulnerability stems from incorrect handling of the Pre-Fetch Parser (PFP) on compute queues, which can lead to synchronization issues. An attacker could potentially exploit this flaw to cause system instability or a denial of service by triggering race conditions during pipeline synchronization or incorrect state after a virtual machine (VM) flush.

A moderate-severity flaw was found in the Linux kernel's AMD GPU (amdgpu) driver on GFX6-series GPUs. On GFX6 hardware, compute rings use the same command processor path as the graphics ring, including the Pre-Fetch Parser (PFP), but the driver did not account for the PFP on compute queues. Register writes were not issued through the PFP on compute queues, the pipeline sync waited on the MicroEngine (ME) rather than the previous fence so that the PFP could begin executing the next submission while the ME was still in the previous one, and PFP_SYNC_ME was not emitted after a VM flush on compute queues. A local user with access to the GPU device could exploit these race conditions to cause system instability or a denial of service. Red Hat Product Security rates this flaw Moderate (CVSS 3.1: 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), lower than the upstream Important rating, because exploitation requires local access with low privileges and the impact is limited to availability within the same security scope, with no demonstrated confidentiality or integrity impact. Red Hat Enterprise Linux 6 and 7 are not affected because the vulnerable code is not present in those kernels. For the affected Red Hat Enterprise Linux, Red Hat In-Vehicle OS, and OpenShift Container Platform streams, the fix is currently deferred because the flaw requires local access to GFX6-series GPU hardware and does not enable privilege escalation or information disclosure; the residual risk is that a local user on such a system could trigger the synchronization races to crash or destabilize the GPU and the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.