CVE-2026-89814

7.8 HIGH

Published 2026-09-16 · Updated 2026-09-17

AI risk analysis

Summary: This vulnerability allows out-of-bounds memory access in the Linux kernel's AMDGPU driver, leading to potential system instability or security issues.
Exploitability: Exploitation requires root privileges and specific conditions, such as a ring not assigned to a partition. The vulnerability is not easily exploitable without these conditions.
Blast radius: If exploited, the vulnerability could lead to system crashes or privilege escalation, impacting the integrity and availability of the system.
Detection: No reliable host or network indicator is derivable from the published description.
Prioritized remediation: Upgrade to the Linux kernel version 6.1.17 or later.

kernelmemory-accessstabilityprivilege-escalation

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: clamp the isolation index for rings outside a partition adev->isolation[] has one slot per partition, but a ring that is not assigned to one keeps AMDGPU_XCP_NO_PARTITION, which is ~0, so indexing the array with it is out of bounds. SDMA submissions hit this on both the isolation enforcement and the VM flush path and trip UBSAN. Fall back to the first slot the way the cleaner shader path already does, and stop taking the address before the ring type check that makes it relevant.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Data: NVD (public domain). Analysis: local $0 model. Defensive use only.