CVE-2026-100077

drm/msm: Recover HW before retire hung submit

State
Published
Severity
Not scored
Published
Sep 25, 2026
Updated
Oct 30, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/msm: Recover HW before retire hung submit

During recovery, it is not safe to retire the hung submit before we recover the GPU. Retiring the submit triggers BO free and that can result in GPU pagefaults since the GPU may be actively accessing those BOs.

To fix this, retire the submits after gpu recovery is complete in recover_worker().

Patchwork: https://patchwork.freedesktop.org/patch/730655/

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1a370be9ac51129e40b0ed7fa71d2b2b92bc47e5 to before 9cf623ae29876788adfddd6ca01e2b8545594c14Affected
  • 1a370be9ac51129e40b0ed7fa71d2b2b92bc47e5 to before d4bee74b7cb93e40c60b43dc9dc0c3aab444649fAffected
  • 1a370be9ac51129e40b0ed7fa71d2b2b92bc47e5 to before 2f021d93f15829ba052ff22bc40df0ec3ae7c7abAffected
  • 1a370be9ac51129e40b0ed7fa71d2b2b92bc47e5 to before e36284257eeca13768687bf8e52f66f8ea0e8794Affected
  • 1a370be9ac51129e40b0ed7fa71d2b2b92bc47e5 to before dc64cf9d71428234389b635d142cb5fe07d57eabAffected
  • 1a370be9ac51129e40b0ed7fa71d2b2b92bc47e5 to before b303e1d52811de7d1bcf793560754d4df68d4a1cAffected
LinuxLinux
  • 4.2Affected
  • before 4.2Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.52 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.