CVE Database›Document archive›CVE-2026-93809

CVE-2026-93809

kernel: drm/amdgpu: flush pending RCU callbacks on module unload

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · September 24, 2026

Updated · October 18, 2026

Description

A flaw was found in the Linux kernel's AMD GPU driver (amdgpu). A local user with administrative privileges could cause a Denial of Service (DoS) by unloading the driver module while callbacks are still scheduled. Because the driver does not wait for pending Read-Copy Update (RCU) callbacks to complete before releasing module memory, the system attempts to execute instructions from freed memory, resulting in a kernel crash.

Statement

A moderate severity flaw was found in the Linux kernel's AMD GPU (amdgpu) driver. The driver's module exit path did not call rcu_barrier() to wait for pending Read-Copy-Update (RCU) callbacks before the module text was freed. A local attacker with administrative privileges (the ability to unload kernel modules, such as CAP_SYS_MODULE) could trigger this flaw by unloading the amdgpu driver module while RCU callbacks queued through call_rcu() were still pending; the kernel would then execute a callback from freed module memory, causing a kernel page fault and crash, resulting in a denial of service. There is no impact to confidentiality or integrity. All currently supported Red Hat products are not affected by this flaw because the vulnerable code is not present in the shipped kernels of Red Hat Enterprise Linux 7, 8, 9, and 10, Red Hat In-Vehicle OS, and OpenShift Container Platform. The only Red Hat stream where this flaw is tracked is Red Hat Enterprise Linux 6 Extended Lifecycle Support (kernel), which is out of support scope, so no fix will be provided for it; the residual risk there is limited to a local denial of service by an already privileged user on out-of-support systems.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-825 · Expired Pointer Dereference