SB2026102426 - Infinite loop in Linux kernel amd amdgpu driver

Description

This security bulletin contains information about 1 vulnerability.

1) Infinite loop (CVE-ID: CVE-2026-98894)

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

CVSSv4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service by hanging a CPER record-writing worker.

The vulnerability exists due to an infinite loop in amdgpu_cper_ring_write() when CPER ring overflow recovery processes a corrupt entry size that leaves the read pointer unchanged after conversion to doublewords and pointer masking. A local user can trigger processing of such an entry, if able to influence the ring contents, to keep the recovery loop spinning while holding the CPER ring mutex and hang the record-writing worker.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/4d695e66d7027a0c78302e47ac76293675fbbb4d
• https://git.kernel.org/stable/c/a98d0d49757a113ce17960262b9cd4ccc1420108