In the Linux kernel, the following vulnerability has been resolved: drm/amd/ras: reset CPER ring on corrupt entry size When CPER ring overflow… (CVE-2026-98894)

The vulnerability in the Linux kernel affects the drm/amd/ras module's handling of the CPER ring buffer during overflow conditions. Specifically, when the CPER ring overflow handler advances the read pointer (rptr), it trusts the parsed entry size from the ring contents. Corrupt CPER data can cause an entry size that does not advance the read pointer after dword conversion and pointer masking. This leads to a recovery loop that repeatedly tests the same location while holding the CPER ring mutex, causing the worker responsible for writing the next CPER record to hang. The implemented fix detects when the read pointer fails to progress and resets the CPER ring to an empty state, dropping corrupt contents and allowing the writer to exit the recovery path without spinning.

The vulnerability can cause a hang in the worker thread responsible for writing CPER records due to an infinite recovery loop triggered by corrupt CPER data. This may lead to degraded system functionality or denial of service conditions related to error reporting and recovery mechanisms in the AMD GPU driver subsystem within the Linux kernel.

A fix has been implemented in the Linux kernel to detect no-progress updates of the read pointer and reset the CPER ring to an empty state, effectively dropping corrupt data and preventing hangs. Users should apply the official Linux kernel updates that include this fix. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor or Linux kernel advisory for the current remediation guidance.