Live › vulnerability › CVE-2026-98898
Go to dashboardWith DPM disabled via the amdgpu.dpm=0 module parameter, the AMD Southern Islands driver could schedule thermal work on a work queue that was never initialized. The sources describe a fix that skips scheduling in that case; they do not describe an attacker-reachable impact.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running a Linux kernel with the amdgpu driver for AMD Southern Islands (SI) GPUs, where DPM is turned off with the amdgpu.dpm=0 module parameter. Systems without SI-generation AMD GPUs or with DPM enabled are not described as affected.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized
When DPM is turned off with the amdgpu.dpm=0 module parameter, the thermal work queue isn't initialized so we shouldn't schedule any work on it.
(cherry picked from commit bd018d36171a695952c6d391471c279c9e05c8b2)
This page as .md · .json · in your agent: get_signal("CVE-2026-98898")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.