CVE-2026-98165drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only The BAR0 fallback read path was introduced as a workaround for SR-IOV VFs where the VRAM aperture is not available during early init. Restrict this workaround to only SR-IOV VFs where it's needed. (cherry picked from commit d8a0affd207c813bd063fa2c27786f449eaf92b8)
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 6, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 95eccb9be68df6449d854242b5fcdfd063a2fac1 before 5612934c255ad9352d07181f14981cfabd7b7a95; from cba4928cdffaa0f9012acff0ec4f896320107077 before bd1f08246b8a2564d8ac61df715b6bcd5f994729 | CNA record |
References
- https://git.kernel.org/stable/c/5612934c255ad9352d07181f14981cfabd7b7a95
- https://git.kernel.org/stable/c/bd1f08246b8a2564d8ac61df715b6bcd5f994729
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.