Skip to main content
CVE-2026-99150VulnerabilityPublished

Microsoft · drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-99150· Medium

Not known to be exploited · fixed in de9f6bcdb44f0e410031002e2f103826ea6b6259 : update Microsoft when convenient.

Data as of 29 Oct 2026, 11:48 UTC

Severity
Medium

Rated by Threat Radar · CVSS not yet scored by NVD

Thin evidence

One scorer or none
Patch
Available – fixed in de9f6bcdb44f0e410031002e2f103826ea6b6259, 253555a9baccefffe1f6e5f2fe54363c7c01ebb9, 652b1f26125fe48aed5f4944698a85b457eef491 +1

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 28 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 29 Oct 2026.

What to do

Upgrade Linux to de9f6bcdb44f0e410031002e2f103826ea6b6259, 253555a9baccefffe1f6e5f2fe54363c7c01ebb9, 652b1f26125fe48aed5f4944698a85b457eef491 or 5.9; the Debian debian/linux package to 5.9.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • >=5.8.2 <5.9
Fixed in
  • de9f6bcdb44f0e410031002e2f103826ea6b6259
  • 253555a9baccefffe1f6e5f2fe54363c7c01ebb9
  • 652b1f26125fe48aed5f4944698a85b457eef491
  • 5.9
LinuxLinuxAffected
  • =5.9
Fixed in–
Debiandebian/linuxpkg:deb/debian/linuxOther threatsAffected
  • >=5.8.2 <5.9
  • =5.9
Fixed in
  • 5.9

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

This vulnerability concerns the amdgpu driver component in Microsoft software, specifically related to improper handling of runtime power management references in the amdgpu_gpr function. The issue involves dropping the runtime PM reference twice, which may lead to unintended behavior. The affected version explicitly stated is version 3.0. No CVSS score or detailed impact information is provided.

References

Community reviews

Loading reviews…