Description
In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()

amdgpu_debugfs_test_ib_show() resumes the device with
pm_runtime_get_sync() before taking the reset domain semaphore with
down_write_killable(). If the write lock acquisition is interrupted,
the function returns without calling pm_runtime_put_autosuspend(),
leaking the runtime PM reference acquired for the device and keeping
the GPU awake.

Drop the runtime PM reference on the interrupted down_write_killable()
error path before returning.

(cherry picked from commit ec30a576c2d4c0364549e6c04218f50704ef56c8)
Published: 2026-10-18
Score: n/a
EPSS: n/a
KEV: No
Impact: Denial of Service (Resource Exhaustion)
Action: Apply Patch
AI Analysis

Impact

During runtime, amdgpu_debugfs_test_ib_show() calls pm_runtime_get_sync() to wake the GPU before acquiring a reset domain semaphore; if the down_write_killable() fails, the function returns without releasing the runtime power‑management reference, causing the GPU to remain powered on. This resource leak increases power consumption and can exhaust runtime PM references, directly leading to a denial‑of‑service condition without providing any arbitrary code execution capability.

Affected Systems

All Linux kernel systems that load the AMDGPU driver before the commit that fixed this issue, across any distribution kernel that has not patched the amdgpu debugfs test function; any GPU that supports the amdgpu debugfs interface is affected.

Risk and Exploitability

The data does not provide a CVSS or EPSS score, and the vulnerability is not listed in the CISA KEV catalog, indicating no known exploitation evidence at this time. Because the flaw remains unprivileged and requires a semaphore acquisition failure to manifest, the likelihood of exploitation is considered low, yet the persistent power drain can degrade battery life and overall system stability, representing a moderate risk from a resource exhaustion perspective.

Generated by OpenCVE AI on October 19, 2026 at 00:02 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the kernel patch that releases the runtime PM reference when down_write_killable() fails (commit ec30a576c2d4c0364549e6c04218f50704ef56c8).
  • If an immediate kernel update is not possible, restrict access to the amdgpu debugfs interface to privileged users or remove the amdgpu_debugfs_test_ib_show() entry from the debugfs file system.
  • Monitor GPU runtime power‑management counts or battery consumption to detect unusual wake‑up activity that could signal unresolved references.

Generated by OpenCVE AI on October 19, 2026 at 00:02 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 19 Oct 2026 00:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-399
CWE-404

Sun, 18 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() amdgpu_debugfs_test_ib_show() resumes the device with pm_runtime_get_sync() before taking the reset domain semaphore with down_write_killable(). If the write lock acquisition is interrupted, the function returns without calling pm_runtime_put_autosuspend(), leaking the runtime PM reference acquired for the device and keeping the GPU awake. Drop the runtime PM reference on the interrupted down_write_killable() error path before returning. (cherry picked from commit ec30a576c2d4c0364549e6c04218f50704ef56c8)
Title drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-18T15:17:37.306Z

Reserved: 2026-09-25T10:25:14.354Z

Link: CVE-2026-98519

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-18T16:17:03.260

Modified: 2026-10-18T16:17:03.260

Link: CVE-2026-98519

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-19T02:15:14Z

Weaknesses