CVE-2026-97426
kernel: drm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse error
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 24, 2026
Updated · October 18, 2026
Description
A flaw was found in the Linux kernel's AMDGPU driver. When processing input for the SmartShift bias sysfs configuration interface, an input parsing failure causes the driver to release power management access without having first acquired it. A local user with write access to this interface could supply invalid input to trigger an unbalanced reference count, potentially leading to system instability or a Denial of Service (DoS).
Statement
This issue is rated low impact by Red Hat. A flaw was found in the Linux kernel's AMDGPU driver. When input written to the SmartShift bias sysfs configuration interface fails to parse, the driver releases power management access without having first acquired it, resulting in an unbalanced power management reference count. A local user with write access to this interface could supply invalid input to trigger the imbalance, potentially leading to power management state corruption, system instability, or a denial of service. Within Red Hat's product portfolio, this affects the kernel in newer Red Hat Enterprise Linux 9 and 10 update streams, in Red Hat In-Vehicle OS 2.0 and 2.1 (including the IVOS Qualcomm kernels), and in the RHEL CoreOS 9 kernel shipped in recent OpenShift Container Platform releases. Earlier Red Hat Enterprise Linux 7 and 8 streams, earlier Red Hat Enterprise Linux 9 and 10 update streams, the kernel-rt variants, and earlier OpenShift Container Platform RHCOS releases are not affected because the vulnerable code is not present in those kernels.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-911 · Improper Update of Reference Count