CVE-2026-93139

A flaw was found in the AMDGPU driver within the Linux kernel. An issue with the hung_queue_db_array loop limit for multi-XCC (Cross-Chiplet Interconnect) GPUs can leave array entries uninitialized. This can lead to a null pointer dereference when accessing arrays indexed by XCC ID greater than or equal to 2, potentially causing a system crash or denial of service.

This vulnerability is rated as Moderate impact because triggering it requires local access on systems equipped with specialized multi-XCC AMD GPU hardware, and the resulting blast radius is constrained to a local denial of service via a kernel crash. Typical Red Hat Enterprise Linux deployments do not utilize these specific multi-chiplet accelerators, and the issue cannot be triggered remotely or escalate privileges. As a result, confidentiality and data integrity are not compromised, limiting overall exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.