Thermal Work Scheduling Vulnerability in AMD's Linux Kernel

CVE-2026-98898

What is CVE-2026-98898?

A vulnerability in AMD's Linux kernel implementation relates to thermal work scheduling when the DPM (Dynamic Power Management) is disabled via the amdgpu.dpm=0 parameter. In such scenarios, the thermal work queue may remain uninitialized, leading to potential risks when scheduling thermal tasks that could disrupt system stability. The issue has been addressed in recent commits to improve the operational safety of graphics processing units managed by the AMD driver, enhancing overall thermal management capabilities.

References