Skip to main content
VulnerabilityPublished Updated

CVE-2026-98389: Linux kernel · drm/amdgpu: skip gfx switch_power_profile during GPU reset

Affects Linux kernelSource CVE Database V5

0

Not known to be exploited · fixed in 054022c8e74fe9b6cde63e636146b87cfe40f107 : update Linux kernel when convenient.

Data as of 26 Oct 2026, 12:55 UTC

Severity
Medium

Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD

EPSS
0.1% chance of exploitation in 30 days – higher than 9% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in 054022c8e74fe9b6cde63e636146b87cfe40f107, 52947c09c41cfab4d3d802581b9acf8dbc142fc5, 1f1d43418d61c8511779e0f63a954a78b9433b43

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 14 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade Linux kernel to 054022c8e74fe9b6cde63e636146b87cfe40f107, 52947c09c41cfab4d3d802581b9acf8dbc142fc5 or 1f1d43418d61c8511779e0f63a954a78b9433b43.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 8fdb3958e3965fcd11408e1cd5380895cdc96e06, < 054022c8e74fe9b6cde63e636146b87cfe40f107
Fixed in
  • 054022c8e74fe9b6cde63e636146b87cfe40f107
LinuxLinuxAffected
  • ≥ 8fdb3958e3965fcd11408e1cd5380895cdc96e06, < 52947c09c41cfab4d3d802581b9acf8dbc142fc5
Fixed in
  • 52947c09c41cfab4d3d802581b9acf8dbc142fc5
LinuxLinuxAffected
  • ≥ 8fdb3958e3965fcd11408e1cd5380895cdc96e06, < 1f1d43418d61c8511779e0f63a954a78b9433b43
Fixed in
  • 1f1d43418d61c8511779e0f63a954a78b9433b43
LinuxLinuxAffected
  • =6.15
Fixed in–

AI-suggested

A fix is available and has been applied in the Linux kernel in the specified commits. Users should update to a Linux kernel version that includes these fixes to resolve the issue.

Description

CVE-2026-98389 is a vulnerability in the Linux kernel's AMDGPU driver where the gfx switch_power_profile function is invoked during GPU reset before the reset completes. This leads to an assertion error due to register access without releasing the GPU reset semaphore. The issue has been fixed in later commits.

References

Community reviews

Loading reviews…