CVE-2026-23213drm/amd/pm: Disable MMIO access during SMU Mode 1 reset
Updated under an hour ago ()
Does this affect you?
It affects Linux and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Disable MMIO access during SMU Mode 1 reset During Mode 1 reset, the ASIC undergoes a reset cycle and becomes temporarily inaccessible via PCIe. Any attempt to access MMIO registers during this window (e.g., from interrupt handlers or other driver threads) can result in uncompleted PCIe transactions, leading to NMI panics or system hangs. To prevent this, set the `no_hw_access` flag to true immediately after triggering the reset. This signals other driver components to skip register accesses while the device is offline. A memory barrier `smp_mb()` is added to ensure the flag update is globally visible to all cores before the driver enters the sleep/wait state. (cherry picked from commit 7edb503fe4b6d67f47d8bb0dfafb8e699bb0f8a4)
- CVSS
- 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 21, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from ea8139d8d59bd6f014b317e7423345169a56fe49 before b2b9ac2bb2c5b5b0a39f7f422bbe12d3ea4ccf34; from ea8139d8d59bd6f014b317e7423345169a56fe49 before c1853ebbec980d5c05d431bfd6ded73b1363fd00; from ea8139d8d59bd6f014b317e7423345169a56fe49 before cd7ff7fd3e4b77f0b5a292e0926532eaa07c5162; from ea8139d8d59bd6f014b317e7423345169a56fe49 before 0de604d0357d0d22cbf03af1077d174b641707b6 | CNA record |
linux linux_kernel linux:linux_kernel | from 5.9 before 6.12.70; from 6.13 before 6.18.10; 6.19; 6.19; 6.19; 6.19 | NVD |
References
- https://git.kernel.org/stable/c/b2b9ac2bb2c5b5b0a39f7f422bbe12d3ea4ccf34
- https://git.kernel.org/stable/c/c1853ebbec980d5c05d431bfd6ded73b1363fd00patch
- https://git.kernel.org/stable/c/cd7ff7fd3e4b77f0b5a292e0926532eaa07c5162patch
- https://git.kernel.org/stable/c/0de604d0357d0d22cbf03af1077d174b641707b6patch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.