CVE-2026-97424 Linux CVE debrief

Who should care

Linux kernel maintainers, administrators, and users of Linux distributions that utilize amdgpu gfx RAS features should assess exposure and verify vulnerability resolution. This includes reviewing Linux kernel patch levels, assessing deployments for amdgpu gfx RAS feature usage, and ensuring proper implementation of ras_suspend and fini functions. The vulnerability's impact is relevant to operators, platforms, vulnerability management, and security teams.

Why it matters

Linux kernel vulnerability resolved with drm/amdgpu/ras changes; assess exposure and verify vulnerability resolution in Linux kernel deployments.

• Verify Linux kernel patch level for vulnerability resolution
• Assess exposure in Linux kernel deployments using amdgpu gfx RAS features
• Review and update Linux kernel configurations for proper ras_suspend callback implementation

Technical summary

The Linux kernel vulnerability, CVE-2026-97424, was resolved with changes to drm/amdgpu/ras, including the addition of a ras_suspend callback and its use for cp_ecc_error_irq. The vulnerability involved improper handling of cp_ecc_error_irq in amdgpu_gfx_ras_late_init() and gfx_v9_0_hw_fini(). The changes ensure proper cleanup and management of cp_ecc_error_irq, preventing potential issues such as double-releasing of resources. This technical summary frames the vulnerability and resolution in a source-grounded manner.

Defensive priority

Assess exposure in Linux kernel deployments using amdgpu gfx RAS features

Recommended defensive actions

• Assess Linux kernel deployments for amdgpu gfx RAS feature usage
• Verify if amdgpu gfx RAS suspend and fini functions are properly implemented
• Review Linux kernel version and patch level for vulnerability resolution
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and NVD entry provide details on a Linux kernel vulnerability resolved with drm/amdgpu/ras changes. The vulnerability involves improper handling of cp_ecc_error_irq. Evidence is grounded in official CVE and NVD documentation. Defenders should verify Linux kernel patch levels and assess exposure in deployments using amdgpu gfx RAS features. The source confidence is limited to publicly available information.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.