drm/amdgpu: prevent immediate PASID reuse case (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.16 % · centile 5 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent immediate PASID reuse case PASID resue could cause interrupt issue when process immediately runs into hw state left by previous process exited with the same PASID, it's possible that page faults are still pending in the IH ring buffer when the process exits and frees up its PASID. To prevent the case, it uses idr cyclic allocator same as kernel pid's. (cherry picked from commit 8f1de51f49be692de137c8525106e0fce2d1912d)
Références
- https://git.kernel.org/stable/c/185a5e779c259869b8d5c20bd90e7a780c56576b
- https://git.kernel.org/stable/c/f69491478e3de0e3c6aac2ee89b3cda3f2471301
- https://git.kernel.org/stable/c/c0b3882836de8ac991b626823966f385555bbcff
- https://git.kernel.org/stable/c/51ccaf0e30c303149244c34820def83d74c86288
- https://git.kernel.org/stable/c/9e5ebfe99b223bb0eb9c50a125c9c02f4ef4c71b
- https://git.kernel.org/stable/c/14b81abe7bdc25f8097906fc2f91276ffedb2d26
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2026-24803
- GCVE · GCVE-0-2026-31462
Avis du CERT-FR
- CERTFR-2026-AVI-1064 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0900 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0864 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0548 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.15 < 6.12.80cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.13 < 6.18.21cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.19 < 6.19.11cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 02208441cc3a5110191996bb129db39ff10e7395 < 185a5e779c259869b8d5c20bd90e7a780c56576b ; affected 02208441cc3a5110191996bb129db39ff10e7395 < f69491478e3de0e3c6aac2ee89b3cda3f2471301 ; affected 02208441cc3a5110191996bb129db39ff10e7395 < c0b3882836de8ac991b626823966f385555bbcff ; affected 02208441cc3a5110191996bb129db39ff10e7395 < 51ccaf0e30c303149244c34820def83d74c86288 ; affected 02208441cc3a5110191996bb129db39ff10e7395 < 9e5ebfe99b223bb0eb9c50a125c9c02f4ef4c71b ; affected 02208441cc3a5110191996bb129db39ff10e7395 < 14b81abe7bdc25f8097906fc2f91276ffedb2d26 |
| Linux · Linux | affected 4.15 ; unaffected 0 < 4.15 ; unaffected 6.1.191 ≤ 6.1.* ; unaffected 6.6.160 ≤ 6.6.* ; unaffected 6.12.80 ≤ 6.12.* ; unaffected 6.18.21 ≤ 6.18.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |