Vblank Counter Vulnerability in AMD GPU Driver
CVE-2026-99090

Currently unrated

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
26 October 2026

What is CVE-2026-99090?

A vulnerability in the AMD GPU driver within the Linux kernel allows for improper synchronization during GPU reset operations. Specifically, the issue arises when the vblank counter callback reads display registers without properly acquiring the necessary semaphore. This can lead to access conflicts during GPU recovery, which may subsequently trigger internal kernel assertions and warnings. The proposed fix includes ensuring the reset semaphore is held while reading the vblank counter and scanout position, defaulting to cached values during a reset to mitigate unsafe hardware access. This improvement aims to enhance system stability and avoid warnings related to lock dependency during display operations.

Affected Version(s)

Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 037796d9ca1da97978deaefd88ca5649f6cb69f5

Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 11b6193c8841a052b7907006ffb1e02468b1448e

Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 8d6f773d7479034a574ecc3b585bcd07d46b4824

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.