Description
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: force complete the KIQ ring fences on reset
Like the MES scheduler ring, the KIQ ring sets no_scheduler = true and uses a polling fence, so it is skipped by the force-completion loop in amdgpu_device_pre_asic_reset(). Its hw fence value lives in wb (GTT) memory and survives a MODE1 reset while fence_drv.sync_seq keeps advancing, so after a reset the first KIQ submission can poll forever on a seq that is never written back.
Force complete the KIQ ring fences too so their hw fence is realigned to sync_seq.
Metrics
No CVSS score has been published yet.
Affected software
Source: the vendor's advisory (CNA). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 65781c78ad74e4260fbec92c0ecc05738044e177, < 83c54ed3be2f71a21e0f12ce5ca64435e33ba440; >= 65781c78ad74e4260fbec92c0ecc05738044e177, < 11adb2bae30a3155395594e5c9bc0daf0c4ffa15; >= 65781c78ad74e4260fbec92c0ecc05738044e177, < 9944329e409b04d71fa22f39b38a4bd78b75bcd9; >= 65781c78ad74e4260fbec92c0ecc05738044e177, < c26cbd5c33cd72daa03079235de60688a3c97c52; >= 65781c78ad74e4260fbec92c0ecc05738044e177, < bdd6a58743e00ebc6d52b9cdf9aafb4e535e0b71; >= 65781c78ad74e4260fbec92c0ecc05738044e177, < fd65d1742992361fc2201ecb4e43411e6e417fcb |
| Linux | Linux | 4.13 |
References
- https://git.kernel.org/stable/c/11adb2bae30a3155395594e5c9bc0daf0c4ffa15
- https://git.kernel.org/stable/c/83c54ed3be2f71a21e0f12ce5ca64435e33ba440
- https://git.kernel.org/stable/c/9944329e409b04d71fa22f39b38a4bd78b75bcd9
- https://git.kernel.org/stable/c/bdd6a58743e00ebc6d52b9cdf9aafb4e535e0b71
- https://git.kernel.org/stable/c/c26cbd5c33cd72daa03079235de60688a3c97c52
- https://git.kernel.org/stable/c/fd65d1742992361fc2201ecb4e43411e6e417fcb
Timeline
- Published
- Sep 16, 2026
- Last modified
- Oct 30, 2026
- NVD status
- Received