CVE-2026-98389

A flaw was found in the Linux kernel's AMD GPU (amdgpu) driver. During recovery from a graphics processing unit (GPU) reset, background power management tasks can attempt to change power profiles before the reset completes. This improper synchronization causes hardware register access while reset locks are still held, triggering a kernel assertion failure. A local user could exploit this condition to crash the operating system, resulting in a Denial of Service (DoS).

A flaw with LOW security impact was found in the Linux kernel's AMD GPU (amdgpu) driver used by Red Hat products. During recovery from a GPU reset, the graphics idle work handler can invoke power profile switching before the reset has completed. This improper synchronization causes GPU register access while the GPU reset semaphore is still held, which triggers a kernel assertion failure. A local user with access to the affected AMD GPU device could exploit this narrow timing window to crash the system, resulting in a denial of service; there is no impact to confidentiality or integrity. The Red Hat Enterprise Linux 7, 8, 9, and 10 kernel and kernel-rt packages, the Red Hat In-Vehicle OS 2 kernels, and the OpenShift Container Platform RHEL CoreOS images are recorded as affected with a deferred fix. Because the issue is a local, timing-dependent denial of service with no confidentiality or integrity impact, the fix is deferred and will be delivered in a future kernel update; the residual risk is a possible system crash during GPU reset recovery on systems with affected AMD graphics hardware. The Red Hat Enterprise Linux 6 Extended Lifecycle Support stream is out of active support scope for this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.