PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-97426 Linux CVE debrief

A vulnerability in the Linux kernel has been resolved, affecting the drm/amdgpu/pm component. The issue involves a SmartShift bias sysfs store PM refcount on parse error. The fix returns the parse error before acquiring PM access. This vulnerability requires verification of system exposure and assessment of potential impact on system stability and security. Linux kernel developers and maintainers should review the patch notes and assess the vulnerability. The CVE record and NVD entry provide limited information about the vulnerability.

Vendor
Linux
Product
Unknown
CVSS
Unknown
CISA KEV
Not listed in stored evidence
Original CVE published
2026-09-24
Original CVE updated
2026-09-25
Advisory published
2026-09-24
Advisory updated
2026-09-25

Who should care

Linux kernel developers and maintainers, system administrators responsible for Linux kernel updates, and security teams should review the patch notes and assess the vulnerability. They should verify if the system uses the affected drm/amdgpu/pm component and assess the potential impact of the vulnerability on the system. Linux kernel developers and maintainers should prioritize patching or mitigating the issue to to

Why it matters

The vulnerability in the Linux kernel requires verification of system exposure and assessment of potential impact on system stability and security. Linux kernel developers and maintainers should review the patch notes and assess the vulnerability.

  • Verification of system exposure to the vulnerability is required
  • Assessment of potential impact on system stability and security

Technical summary

The vulnerability affects the drm/amdgpu/pm component in the Linux kernel. The issue involves a SmartShift bias sysfs store PM refcount on parse error. The fix returns the parse error before acquiring PM access. This technical issue requires review of the Linux kernel patch notes for the fix and verification of system exposure to the vulnerability. The potential impact of the vulnerability on system stability and security should be assessed.

Defensive priority

Low

Recommended defensive actions

  • Review the Linux kernel patch notes for the fix
  • Verify if the system uses the affected drm/amdgpu/pm component
  • Assess the potential impact of the vulnerability on the system

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability. Further verification is required to determine the affected systems and potential impact.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-97426 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-97426

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-97426 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-97426

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/95e13b25196295654563028861e6802807006ad4

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/a4b0c3f5d2287997876d8f711a40d3c0418458d8

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.