CVE-2026-45979 Linux CVE debrief

Who should care

Linux system administrators running AMDGPU graphics, kernel maintainers, embedded systems with memory constraints

Technical summary

The AMDGPU driver's command submission parser (`amdgpu_cs_parser_bos`) did not properly handle `kmalloc()` failure scenarios under low memory conditions. When memory allocation failed, the mutex was not unlocked before exit, potentially causing deadlocks or resource leaks. The fix adds proper mutex unlock in the error path. The `amdgpu_bo_list_put()` cleanup was removed from this path as it is redundantly handled by `amdgpu_cs_parser_fini()`.

Defensive priority

medium

Recommended defensive actions

• Apply kernel updates containing the referenced commits when available from your Linux distribution
• Monitor stable kernel changelogs for backport status of commits 0905a1d4a550 and f025a2b8d933
• Review systems using AMDGPU graphics for kernel version exposure
• Prioritize patching on systems with constrained memory environments where kmalloc failures are more likely

Evidence notes

CVE published 2026-05-27. Kernel commit references confirm the fix was applied to stable kernel branches. No CVSS score or severity assigned by NVD at time of disclosure.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.