SB20260424271 - Improper control of a resource through its lifetime in Linux kernel amd amdgpu driver

Description

This security bulletin contains information about 1 vulnerability.

1) Improper control of a resource through its lifetime (CVE-ID: CVE-2026-31462)

CWE-ID: CWE-664 - Improper control of a resource through its lifetime

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper resource management in the amdgpu PASID allocation logic when reusing a PASID immediately after process exit. A local user can trigger immediate PASID reuse to cause a denial of service.

Pending page faults may still remain in the IH ring buffer from the previous process when the PASID is reused.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/14b81abe7bdc25f8097906fc2f91276ffedb2d26
• https://git.kernel.org/stable/c/51ccaf0e30c303149244c34820def83d74c86288
• https://git.kernel.org/stable/c/9e5ebfe99b223bb0eb9c50a125c9c02f4ef4c71b
• https://git.kernel.org/stable/c/c0b3882836de8ac991b626823966f385555bbcff