SB2026102294 - Missing Release of Resource after Effective Lifetime in Linux kernel amd amdgpu driver

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026102294

SB2026102294 - Missing Release of Resource after Effective Lifetime in Linux kernel amd amdgpu driver

Published: October 22, 2026

Security Bulletin ID SB2026102294
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Partial DoS

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Missing Release of Resource after Effective Lifetime (CVE-ID: CVE-2026-98519)

CWE-ID: CWE-772 - Missing Release of Resource after Effective Lifetime

CVSSv4: 1.8 [CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a local privileged user to keep the GPU awake and increase power consumption by preventing runtime suspension.

The vulnerability exists due to a missing release of a runtime power management reference in amdgpu_debugfs_test_ib_show() when acquisition of the reset domain semaphore's write lock is interrupted. A local privileged user can invoke the debugfs test operation and interrupt its lock acquisition to leave the runtime power management reference held, preventing the GPU from entering runtime suspension.


Remediation

Install update from vendor's website.

References