Infinite loop in Linux kernel - CVE-2026-98894

Vulnerability identifier: #VU157612

CSH Severity: Low

CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-98894

CWE-ID: CWE-835

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to cause a denial of service by hanging a CPER record-writing worker.

The vulnerability exists due to an infinite loop in amdgpu_cper_ring_write() when CPER ring overflow recovery processes a corrupt entry size that leaves the read pointer unchanged after conversion to doublewords and pointer masking. A local user can trigger processing of such an entry, if able to influence the ring contents, to keep the recovery loop spinning while holding the CPER ring mutex and hang the record-writing worker.

Linux kernel
Ubuntu
linux (Ubuntu package)
linux-aws (Ubuntu package)
linux-gcp (Ubuntu package)
linux-oracle (Ubuntu package)
linux-ibm (Ubuntu package)
linux-hwe-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
linux (Ubuntu package) - update to 7.0.0-42.42
linux-aws (Ubuntu package) - update to 7.0.0-1016.17
linux-gcp (Ubuntu package) - update to 7.0.0-1016.18
linux-oracle (Ubuntu package) - update to 7.0.0-1015.16
linux-ibm (Ubuntu package) - update to 7.0.0-1017.17
linux-hwe-7.0 (Ubuntu package) - update to 7.0.0-42.42~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1017.17

• https://git.kernel.org/stable/c/4d695e66d7027a0c78302e47ac76293675fbbb4d
• https://git.kernel.org/stable/c/a98d0d49757a113ce17960262b9cd4ccc1420108

• Infinite loop in Linux kernel amd amdgpu driver
• Ubuntu update for linux-oem-7.0
• Ubuntu update for linux, linux-aws, linux-gcp and more