A vulnerability in the Linux kernel's AMDGPU driver related to the AMDGPU_INFO_READ_MMR_REG functionality was resolved. (CVE-2026-53293)
A vulnerability in the Linux kernel's AMDGPU driver related to the AMDGPU_INFO_READ_MMR_REG functionality was resolved. The issues included incorrect locking order, memory allocation while holding a semaphore leading to potential deadlocks, and improper use of down_read_trylock instead of waiting for reset completion. These flaws could cause denial of service due to deadlocks or hangs.
AI Analysis
Technical Summary
This vulnerability in the Linux kernel's AMDGPU driver involved multiple concurrency and synchronization bugs in the AMDGPU_INFO_READ_MMR_REG code path. Specifically, the reset semaphore and mm_lock were used in the wrong order, memory was allocated while holding the reset semaphore (risking deadlock), and down_read_trylock was used improperly instead of waiting for reset completion. These issues could cause the system to hang or deadlock, resulting in denial of service conditions. The vulnerability is tracked as CVE-2026-53293 and classified under CWE-667 (Improper Locking).
Potential Impact
The vulnerability does not affect confidentiality or integrity but can cause denial of service (system hangs or deadlocks) due to improper locking and synchronization in the AMDGPU driver. There are no known exploits in the wild.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Users should monitor for updates from the Linux kernel maintainers regarding this issue.
A vulnerability in the Linux kernel's AMDGPU driver related to the AMDGPU_INFO_READ_MMR_REG functionality was resolved. (CVE-2026-53293)
Description
A vulnerability in the Linux kernel's AMDGPU driver related to the AMDGPU_INFO_READ_MMR_REG functionality was resolved. The issues included incorrect locking order, memory allocation while holding a semaphore leading to potential deadlocks, and improper use of down_read_trylock instead of waiting for reset completion. These flaws could cause denial of service due to deadlocks or hangs.
CVSS v3.1
Score 5.5medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in the Linux kernel's AMDGPU driver involved multiple concurrency and synchronization bugs in the AMDGPU_INFO_READ_MMR_REG code path. Specifically, the reset semaphore and mm_lock were used in the wrong order, memory was allocated while holding the reset semaphore (risking deadlock), and down_read_trylock was used improperly instead of waiting for reset completion. These issues could cause the system to hang or deadlock, resulting in denial of service conditions. The vulnerability is tracked as CVE-2026-53293 and classified under CWE-667 (Improper Locking).
Potential Impact
The vulnerability does not affect confidentiality or integrity but can cause denial of service (system hangs or deadlocks) due to improper locking and synchronization in the AMDGPU driver. There are no known exploits in the wild.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Users should monitor for updates from the Linux kernel maintainers regarding this issue.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-qxgc-w63m-xvqr
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-53293"]
- Ecosystems
- []
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6a4e4ed6c9d9e3dbe328826b
Added to database: 07/08/2026, 13:21:26 UTC
Last enriched: 07/08/2026, 13:30:41 UTC
Last updated: 07/31/2026, 19:24:49 UTC
Views: 40
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.