CVE-2026-90286 (GCVE-0-2026-90286)
Vulnerability from cvelistv5
Published
2026-09-17 16:08
Modified
2026-10-19 09:01
Severity ?
8.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx6: Use PFP on the compute queues too On GFX6, the compute rings use the same CP path as the graphics ring. The only difference is that they don't support draw commands. (As opposed to GFX7 and newer which have a separate command parser that is called MEC for compute queues.) This means that we have to take into consideration that the PFP also exists on compute queues on GFX6: Use PFP for register writes on both graphics and compute queues. In the pipeline sync, use the PFP to wait for the previous fence (and not the ME) to prevent the PFP from starting to execute the next submission while the ME is still in the previous submission. After a VM flush, emit PFP_SYNC_ME on compute queues as well.
References
Impacted products
Vendor Product Version
Linux Linux Version: 2cd46ad22383ab8372b86cdb5257589496099412
Version: 2cd46ad22383ab8372b86cdb5257589496099412
Version: 2cd46ad22383ab8372b86cdb5257589496099412
Version: 2cd46ad22383ab8372b86cdb5257589496099412
Version: 2cd46ad22383ab8372b86cdb5257589496099412
Version: 2cd46ad22383ab8372b86cdb5257589496099412
Version: 2cd46ad22383ab8372b86cdb5257589496099412
Version: 2cd46ad22383ab8372b86cdb5257589496099412
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "f37211b9c01433f0bbb4709d25df7a0257cf915b",
              "status": "affected",
              "version": "2cd46ad22383ab8372b86cdb5257589496099412",
              "versionType": "git"
            },
            {
              "lessThan": "2aa869c6b23e0b1b7f39f762618852811d75deb9",
              "status": "affected",
              "version": "2cd46ad22383ab8372b86cdb5257589496099412",
              "versionType": "git"
            },
            {
              "lessThan": "fbabc39b4f0fc771b00525ffd448be6a84355048",
              "status": "affected",
              "version": "2cd46ad22383ab8372b86cdb5257589496099412",
              "versionType": "git"
            },
            {
              "lessThan": "b5d1d3e4519dc8f1b55d6b236848bed67b11a2e8",
              "status": "affected",
              "version": "2cd46ad22383ab8372b86cdb5257589496099412",
              "versionType": "git"
            },
            {
              "lessThan": "e1d3018e3621c90cec070b6915836ae129656663",
              "status": "affected",
              "version": "2cd46ad22383ab8372b86cdb5257589496099412",
              "versionType": "git"
            },
            {
              "lessThan": "8d752f1bb73fabe5a425acbf5c767c0fe68bf3c5",
              "status": "affected",
              "version": "2cd46ad22383ab8372b86cdb5257589496099412",
              "versionType": "git"
            },
            {
              "lessThan": "e399e9d7e291ccbeba6560fb8278c8d2aa744521",
              "status": "affected",
              "version": "2cd46ad22383ab8372b86cdb5257589496099412",
              "versionType": "git"
            },
            {
              "lessThan": "60f20946cd318518ddc2c0da12103c666b2b9564",
              "status": "affected",
              "version": "2cd46ad22383ab8372b86cdb5257589496099412",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.9"
            },
            {
              "lessThan": "4.9",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.110",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.52",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.270",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.221",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.188",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.157",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.110",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.52",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2.6",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.3",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/gfx6: Use PFP on the compute queues too\n\nOn GFX6, the compute rings use the same CP path as\nthe graphics ring. The only difference is that they\ndon\u0027t support draw commands. (As opposed to GFX7 and\nnewer which have a separate command parser that is\ncalled MEC for compute queues.)\n\nThis means that we have to take into consideration\nthat the PFP also exists on compute queues on GFX6:\n\nUse PFP for register writes on both graphics and\ncompute queues.\n\nIn the pipeline sync, use the PFP to wait for the\nprevious fence (and not the ME) to prevent the PFP\nfrom starting to execute the next submission while\nthe ME is still in the previous submission.\n\nAfter a VM flush, emit PFP_SYNC_ME on compute\nqueues as well."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - gfx_v6_0_ring_emit_pipeline_sync/emit_vm_flush/emit_wreg run from local DRM_IOCTL_AMDGPU_CS (amdgpu_cs_ioctl \u2192 amdgpu_cs_submit \u2192 amdgpu_job_run \u2192 amdgpu_ib_schedule \u2192 amdgpu_vm_flush) on GFX6 CP_RB1/RB2 compute rings; the trigger is the caller\u2019s own CS IB on /dev/dri/renderD*, not a remote protocol message.\nAC:L - On GFX6, amdgpu_vm_check_compute_bug sets has_compute_vm_bug so every compute job with a VMID emits WAIT_REG_MEM via gfx_v6_0_ring_emit_pipeline_sync, and gmc_v6_0_emit_flush_gpu_tlb uses emit_wreg; usepfp was 0 so PFP never waits. The attacker submits sequential AMDGPU_HW_IP_COMPUTE IBs and PFP prefetching ahead of ME is normal hardware behavior, not a victim-timed race.\nPR:L - AMDGPU_CS is registered DRM_AUTH|DRM_RENDER_ALLOW in amdgpu_ioctls_kms; drm_ioctl_permit() does no capable() check for that path, so any unprivileged local user who can open the render node (typical render/video group) can create a ctx and submit compute IBs without init-namespace root.\nUI:N - The attacker opens their own /dev/dri/renderD* fd, issues DRM_IOCTL_AMDGPU_CTX/GEM_VA and DRM_IOCTL_AMDGPU_CS with ip_type=AMDGPU_HW_IP_COMPUTE, and trips gfx_v6_0_ring_emit_vm_flush themselves; no other user must mount, open, or interact with a GPU context.\nS:C - Without PFP_SYNC_ME after gfx_v6_0_ring_emit_vm_flush, and with WRITE_DATA of mmVM_CONTEXT*_PAGE_TABLE_BASE_ADDR/mmVM_INVALIDATE_REQUEST issued on ME, the PFP/CUs can DMA using stale GPUVM TLB entries after a VMID switch or unmap, crossing the GPUVM DMA isolation boundary that is supposed to confine each VMID to its current page tables.\nC:H - PACKET3_INDIRECT_BUFFER in gfx_v6_0_ring_emit_ib is fetched by PFP through GPUVM; if that fetch and the subsequent dispatch run before ME finishes gmc_v6_0_emit_flush_gpu_tlb, loads hit leftover translations to pages already reused by another process or the kernel, which is an arbitrary physical-memory read via GPU DMA.\nI:H - The same stale VM_CONTEXT PTEs let compute shaders and CP packets store through GPU VAs whose physical pages were remapped after GEM_VA unmap or VMID reuse, giving a GPU DMA write into recycled host pages and control-flow hijack via hostile packet bytes the PFP fetched from the wrong address.\nA:H - Invalid PFP reads of IB contents through a not-yet-invalidated TLB feed garbage into the SI CP (the commit\u2019s stated failure mode), causing VM faults, compute-ring hangs on CP_RB1/RB2, and amdgpu GPU reset that takes down the shared GFX6 device."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T09:01:04.715Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/f37211b9c01433f0bbb4709d25df7a0257cf915b"
        },
        {
          "url": "https://git.kernel.org/stable/c/2aa869c6b23e0b1b7f39f762618852811d75deb9"
        },
        {
          "url": "https://git.kernel.org/stable/c/fbabc39b4f0fc771b00525ffd448be6a84355048"
        },
        {
          "url": "https://git.kernel.org/stable/c/b5d1d3e4519dc8f1b55d6b236848bed67b11a2e8"
        },
        {
          "url": "https://git.kernel.org/stable/c/e1d3018e3621c90cec070b6915836ae129656663"
        },
        {
          "url": "https://git.kernel.org/stable/c/8d752f1bb73fabe5a425acbf5c767c0fe68bf3c5"
        },
        {
          "url": "https://git.kernel.org/stable/c/e399e9d7e291ccbeba6560fb8278c8d2aa744521"
        },
        {
          "url": "https://git.kernel.org/stable/c/60f20946cd318518ddc2c0da12103c666b2b9564"
        }
      ],
      "title": "drm/amdgpu/gfx6: Use PFP on the compute queues too",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-90286",
    "datePublished": "2026-09-17T16:08:15.335Z",
    "dateReserved": "2026-09-11T19:38:34.797Z",
    "dateUpdated": "2026-10-19T09:01:04.715Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.