CVE-2026-97928 PUBLISHED

drm/amdgpu: skip the VMID 0 flush for VRAM

Assigner: Linux
Reserved: 25.09.2026 Published: 25.09.2026 Updated: 25.09.2026

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: skip the VMID 0 flush for VRAM

Clear-on-release only runs on VRAM, which amdgpu_ttm_map_buffer() reaches via its direct MC address without programming a GART window, yet the wipe still forces a VMID 0 flush. On GFX11 (e.g. Navi33) that spurious SDMA flush can wedge the engine; only flush when a GART window is actually used.

v2: Let amdgpu_ttm_map_buffer() return whether the VMID 0 flush is needed, and drive the clear and copy paths from that. (Christian) v3: Make the vm_needs_flush output parameter mandatory instead of allowing NULL. (Christian)

(cherry picked from commit a306e406e570b74318ff7d80e5b07b540ca1d3a9)

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from a68c7eaa7a8ffdec9287ba1561a668d674c20a13 to 241d7450cf75969cea450eb3e740cb9682f69c2f (excl.)
  • affected from a68c7eaa7a8ffdec9287ba1561a668d674c20a13 to 87ceb8cba73d0b3c4025ff42495bccd8164acaed (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.10 is affected
  • unaffected from 0 to 6.10 (excl.)
  • unaffected from 7.2.7 to 7.2.* (incl.)
  • unaffected from 7.3-rc3 to * (incl.)

References