Riskcovery

CVE-2026-93139

drm/amdgpu/mes: Fix hung_queue_db_array loop limit for multi-XCC

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 19, 2026
Reserved
Sep 17, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/mes: Fix hung_queue_db_array loop limit for multi-XCC

The loop iterated only AMDGPU_MAX_MES_PIPES times, leaving entries uninitialized for multi-XCC GPUs. This causes null pointer dereferences when accessing arrays indexed by XCC ID >= 2. Extend the loop to cover all XCCs (AMDGPU_MAX_MES_PIPES * num_xcc), matching other per-XCC arrays.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a132fc9bc2f8b394a2f75947a0e1f5c22482a94c to before 7ff668cfc3960ed5b944ac35129f18a15ea08b74Affected
  • a132fc9bc2f8b394a2f75947a0e1f5c22482a94c to before 2c256086a363f01f9840a57949506eccf5c990a6Affected
LinuxLinux
  • 7.2Affected
  • before 7.2Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.