CVE-2026-100077
N/A
N/A
Summary
In the Linux kernel, the following vulnerability has been resolved:
drm/msm: Recover HW before retire hung submit
During recovery, it is not safe to retire the hung submit before we recover the GPU. Retiring the submit triggers BO free and that can result in GPU pagefaults since the GPU may be actively accessing those BOs.
To fix this, retire the submits after gpu recovery is complete in recover_worker().
Patchwork: https://patchwork.freedesktop.org/patch/730655/
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 1a370be9ac51129e40b0ed7fa71d2b2b92bc47e5 < e36284257eeca13768687bf8e52f66f8ea0e8794 | affected |
| Linux | Linux | 1a370be9ac51129e40b0ed7fa71d2b2b92bc47e5 < dc64cf9d71428234389b635d142cb5fe07d57eab | affected |
| Linux | Linux | 1a370be9ac51129e40b0ed7fa71d2b2b92bc47e5 < b303e1d52811de7d1bcf793560754d4df68d4a1c | affected |
| Linux | Linux | 4.2 | affected |
| Linux | Linux | 0 < 4.2 | unaffected |
| Linux | Linux | 6.18.52 <= 6.18.* | unaffected |
| Linux | Linux | 7.2.6 <= 7.2.* | unaffected |
| Linux | Linux | 7.3-rc1 <= * | unaffected |
Weaknesses
References
- https://git.kernel.org/stable/c/e36284257eeca13768687bf8e52f66f8ea0e8794
- https://git.kernel.org/stable/c/dc64cf9d71428234389b635d142cb5fe07d57eab
- https://git.kernel.org/stable/c/b303e1d52811de7d1bcf793560754d4df68d4a1c
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.