CVE-2026-97947: Linux kernel · x86/amd_node: Fix potential NULL pointer dereference
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in fcd19bc829eca237742a3b123f839ad1c473ec85 : update Linux kernel when convenient.
Data as of 26 Oct 2026, 13:23 UTC
Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 9% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in fcd19bc829eca237742a3b123f839ad1c473ec85, aefdbd574a362dcf7569bada6d72f64a006b9fb9, a797a2331e5d2ecdbccbae222ea71c759fdb2c2b
Exploitation evidence
Disclosed: evidence found.
CVE published 25 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to fcd19bc829eca237742a3b123f839ad1c473ec85, aefdbd574a362dcf7569bada6d72f64a006b9fb9 or a797a2331e5d2ecdbccbae222ea71c759fdb2c2b.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
A fix for this vulnerability is available and has been applied in specific Linux kernel commits. Users should update to the fixed kernel versions or apply the relevant patches to prevent the NULL pointer dereference.
Description
A potential NULL pointer dereference vulnerability was identified and fixed in the Linux kernel's x86/amd_node subsystem. The issue arises because amd_smn_read/write() functions remain available even if amd_smn_init() fails, leading to a NULL 'amd_roots' pointer being accessed. The fix involved reordering initialization and removing redundant flags to prevent this unsafe memory access.