Description
In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse error

Return the parse error before acquiring PM access.
Published: 2026-09-24
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Kernel instability or crash due to incorrect reference counting
Action: Apply Update
AI Analysis

Impact

A parse error in the amdgpu driver’s SmartShift bias sysfs store caused the power‑management reference count to be incremented before the function returned. The recent fix returns the error early, preventing the erroneous increment. This reference‑counting bug (CWE‑911) can lead to kernel instability or a panic, but it does not provide a direct privilege‑elevation or user‑space data exfiltration path. Based on the description, it is inferred that the flaw is triggered when an attempt to write an invalid value to the SmartShift bias attribute occurs, leading to a mis‑increment. Risk is limited to kernel‑space crashes; no remote code execution or direct data compromise is described.

Affected Systems

All Linux kernels that include the amdgpu DRM driver and expose the SmartShift bias sysfs attribute are potentially affected. The driver is used on machines with AMD GPUs that rely on the amdgpu driver. Because the advisory does not list explicit kernel versions, any release prior to the commit that introduced the patch is vulnerable.

Risk and Exploitability

The CVSS score of 5.5 indicates moderate severity, while the EPSS score of less than 1% reflects a low probability of exploitation in the wild. The flaw is not listed in the CISA KEV catalog. Because the bug is a reference‑counting error, exploitation would typically require local access to trigger a write to the sysfs attribute; it is unlikely to be remotely exploitable.

Generated by OpenCVE AI on October 1, 2026 at 22:13 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade the Linux kernel to a version that includes the amdgpu SmartShift bias bug fix using your distribution’s package manager or by rebuilding the kernel.
  • Reboot the system so that the updated kernel and driver take effect.
  • If an immediate kernel upgrade is not possible, restrict write access to the SmartShift bias sysfs attribute (e.g., set its permissions to 0444 or remove it via kernel parameters) to prevent accidental writes.

Generated by OpenCVE AI on October 1, 2026 at 22:13 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 01 Oct 2026 16:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-674

Wed, 30 Sep 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-911
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low


Fri, 25 Sep 2026 05:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-674

Thu, 24 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse error Return the parse error before acquiring PM access.
Title drm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse error
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-09-25T12:44:02.223Z

Reserved: 2026-09-24T14:53:16.868Z

Link: CVE-2026-97426

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-24T17:17:20.570

Modified: 2026-09-25T13:17:26.150

Link: CVE-2026-97426

cve-icon Redhat

Severity : Low

Publid Date: 2026-09-24T00:00:00Z

Links: CVE-2026-97426 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-01T22:15:13Z

Weaknesses
  • CWE-911

    Improper Update of Reference Count