CVE-2026-98179 PUBLISHED

drm/amdgpu: fix rmmio iounmap skipped on device removal

Assigner: Linux
Reserved: 25.09.2026 Published: 06.10.2026 Updated: 06.10.2026

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: fix rmmio iounmap skipped on device removal

amdgpu_pci_remove() calls drm_dev_unplug() before fini_sw(), so drm_dev_enter() is already false there and the iounmap() guarded by it is skipped. This .remove path runs on both hot-unplug and plain rmmod, so the register BAR ioremap mapping leaks one instance per unload.

Unmap rmmio unconditionally (guard only on non-NULL) and drop the now unused idx.

(cherry picked from commit dd6f86a97260e5207d3329ad03aa89fdad61b1e6)

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 62d5f9f7110ad374db67ab4820f4ff2d916c3cdb to e81502d6791df9ecd003bfb2ca44f0d1f1b38439 (excl.)
  • affected from 62d5f9f7110ad374db67ab4820f4ff2d916c3cdb to cd55dde2b63789a3dafe982c89844f537501d096 (excl.)
  • affected from 62d5f9f7110ad374db67ab4820f4ff2d916c3cdb to a645584c3ccc493ee835f77155829442bd7578c3 (excl.)
  • affected from 62d5f9f7110ad374db67ab4820f4ff2d916c3cdb to 5155002b03b24ba3ef91c5c313b8cf0171b24904 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 5.17 is affected
  • unaffected from 0 to 5.17 (excl.)
  • unaffected from 6.12.112 to 6.12.* (incl.)
  • unaffected from 6.18.54 to 6.18.* (incl.)
  • unaffected from 7.2.8 to 7.2.* (incl.)
  • unaffected from 7.3-rc4 to * (incl.)

References