Improper update of reference count in Linux kernel - CVE-2026-99150
Published: October 29, 2026
Vulnerability identifier: #VU158429
CSH Severity: Low
CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-99150
CWE-ID: CWE-911
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local privileged user to disrupt GPU runtime power management and potentially cause a denial of service.
The vulnerability exists due to improper reference count updates in the Linux kernel amdgpu_debugfs_gpr_read() function when copying GPU wave register data to userspace fails. A local privileged user can read the amdgpu_gpr debugfs interface into an invalid userspace buffer to trigger a second release of the same runtime power management reference, potentially disrupting GPU operation.
Affected software
Linux kernel
Debian Linux
linux (Debian package)
Debian Linux
linux (Debian package)
How to mitigate CVE-2026-99150
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
linux (Debian package) - update to 6.12.115-2
linux (Debian package) - update to 6.12.115-2