CVE-2026-90286

A moderate-severity flaw was found in the Linux kernel's AMD GPU (amdgpu) driver on GFX6-series GPUs. On GFX6 hardware, compute rings use the same command processor path as the graphics ring, including the Pre-Fetch Parser (PFP), but the driver did not account for the PFP on compute queues. Register writes were not issued through the PFP on compute queues, the pipeline sync waited on the MicroEngine (ME) rather than the previous fence so that the PFP could begin executing the next submission while the ME was still in the previous one, and PFP_SYNC_ME was not emitted after a VM flush on compute queues. A local user with access to the GPU device could exploit these race conditions to cause system instability or a denial of service. Red Hat Product Security rates this flaw Moderate (CVSS 3.1: 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), lower than the upstream Important rating, because exploitation requires local access with low privileges and the impact is limited to availability within the same security scope, with no demonstrated confidentiality or integrity impact. Red Hat Enterprise Linux 6 and 7 are not affected because the vulnerable code is not present in those kernels. For the affected Red Hat Enterprise Linux, Red Hat In-Vehicle OS, and OpenShift Container Platform streams, the fix is currently deferred because the flaw requires local access to GFX6-series GPU hardware and does not enable privilege escalation or information disclosure; the residual risk is that a local user on such a system could trigger the synchronization races to crash or destabilize the GPU and the system.