In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized When DPM… (CVE-2026-98898)

The Linux kernel vulnerability CVE-2026-98898 pertains to the AMD GPU driver (drm/amd/pm/si). When DPM is disabled using the amdgpu.dpm=0 parameter, the thermal work queue is not initialized. The vulnerability involved scheduling thermal work on this uninitialized queue, which is incorrect behavior. The issue was fixed by ensuring that no thermal work is scheduled when the queue is not initialized. The fix was applied by cherry-picking the commit bd018d36171a695952c6d391471c279c9e05c8b2.

The vulnerability could cause improper scheduling of thermal work in the AMD GPU driver when DPM is disabled. This may lead to unexpected behavior related to thermal management, potentially affecting system stability or thermal regulation. No known exploits in the wild have been reported.

A fix for this vulnerability has been applied in the Linux kernel source code as indicated by the referenced commit. Users should update their Linux kernel to a version that includes this fix. Since this is a kernel-level fix, applying official kernel updates from the vendor or distribution is the recommended remediation.