Skip to main content
CVE-2026-98898VulnerabilityPublished Updated

Microsoft · drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-98898· Medium

Not known to be exploited · fixed in f8922d5a946699fc2bdc7660e6778bd6726bf8b8 : update Microsoft when convenient.

Data as of 2 Nov 2026, 10:58 UTC

Severity
Medium

Rated by Threat Radar · CVSS not yet scored by NVD

Thin evidence

One scorer or none
EPSS
0.1% chance of exploitation in 30 days – higher than 7% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in f8922d5a946699fc2bdc7660e6778bd6726bf8b8, ac0250da54afb519fab98478e2e1d9e51d4737fd, 7987c5abdf537663b0957de521edefe77ae12842 +4

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 23 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 1919696eedc1ed5c3ace229576e4fa322fb256dd, < f8922d5a946699fc2bdc7660e6778bd6726bf8b8
Fixed in
  • f8922d5a946699fc2bdc7660e6778bd6726bf8b8
LinuxLinuxAffected
  • ≥ 1919696eedc1ed5c3ace229576e4fa322fb256dd, < ac0250da54afb519fab98478e2e1d9e51d4737fd
Fixed in
  • ac0250da54afb519fab98478e2e1d9e51d4737fd
LinuxLinuxAffected
  • ≥ 1919696eedc1ed5c3ace229576e4fa322fb256dd, < 7987c5abdf537663b0957de521edefe77ae12842
Fixed in
  • 7987c5abdf537663b0957de521edefe77ae12842
LinuxLinuxAffected
  • ≥ 1919696eedc1ed5c3ace229576e4fa322fb256dd, < 2750f52b58d92ca52a5496c00db8abf925103a27
Fixed in
  • 2750f52b58d92ca52a5496c00db8abf925103a27
LinuxLinuxAffected
  • ≥ 1919696eedc1ed5c3ace229576e4fa322fb256dd, < 52c4c623474df0e19efa158057966f2a149bda28
Fixed in
  • 52c4c623474df0e19efa158057966f2a149bda28
LinuxLinuxAffected
  • ≥ 1919696eedc1ed5c3ace229576e4fa322fb256dd, < 8c9e7265b3379eb2ce1758b73c4ffa2606ae2256
Fixed in
  • 8c9e7265b3379eb2ce1758b73c4ffa2606ae2256

Description

This vulnerability, identified as CVE-2026-98898, relates to the drm/amd/pm/si component and involves scheduling thermal work when the queue is not initialized. The advisory does not provide detailed technical information or impact specifics. It affects Microsoft products with versions 3.0 and 4.0. No CVSS score or exploit information is available.

References

Community reviews

Loading reviews…