CVE-2026-89827
Low risk· EPSS 10%Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
In the Linux kernel, uvd_v7_0_sw_init() does not initialize the UVD decode ring for an SR-IOV VF, yet amdgpu_uvd_resume() unconditionally force-completes that ring when restoring its fence sequence. This operates on an uninitialized ring.
Risk Assessment
This may lead to instability or a kernel panic on systems using SR-IOV virtualization with AMD GPUs.
Recommendation
Update the Linux kernel to a version with the fix that skips fence completion when the fence driver is not initialized.
Other vulnerabilities in Linux kernel (drm/amdgpu)
See all- CVE-2026-89828Unknown
In the Linux kernel, amdgpu_vram_mgr_init() in the drm/amdgpu driver calls drmm_cgroup_register_region() before initializing lists and the buddy allocator. On failure, an early return bypasses those initializations, and the teardown path then dereferences NULL pointers, causing a kernel panic on the module load error path.
- CVE-2025-68230Low risk· EPSS 8%
In the Linux kernel, the drm/amdgpu driver can cause a GPU page fault after hibernation and resume in a PF passthrough environment. The partition mode is not restored on resume, leading to incorrect registers and wrong stride size when accessing the MQD BO, causing out-of-bounds access. The fix ensures gfx_v9_4_3_switch_compute_partition() is called on resume from hibernation.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid force-completing uninitialized UVD rings uvd_v7_0_sw_init() does not initialize the UVD decode ring for an SR-IOV VF. However, amdgpu_uvd_resume() unconditionally force-completes the decode ring when restoring its fence sequence. Skip fence completion when the fence driver is not initialized.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS