CVE-2026-89808
Description
A flaw was found in the drm/amdkfd component of the Linux kernel. During virtual memory (VM) migration, if a VM range is a 'hole' on the CPU side, an uninitialized variable is used. This can cause the system to drop all Video Random Access Memory (VRAM), potentially leading to a denial of service or system instability for a local attacker.
Statement
This vulnerability is rated with a Low severity impact because exploiting it requires local privileges, specialized AMD graphics hardware running the amdgpu driver, and specific GPU shared virtual memory operations. On systems with compatible AMD GPUs, an authenticated local user interacting with the compute interface can cause the driver to prematurely release allocated video memory, resulting in a denial of service for GPU-bound workloads. Typical Red Hat Enterprise Linux server installations lack discrete AMD compute hardware or restrict direct access to GPU render nodes, significantly limiting exposure in standard environments.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.5 | N/A | 7.8 |
| Attack Vector | Local | N/A | Local |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | Low | N/A | Low |
| User Interaction | None | N/A | None |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | None | N/A | High |
| Integrity Impact | None | N/A | High |
| Availability Impact | High | N/A | High |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
cve.org: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
