---
id: "CVE-2026-98914"
kind: "vulnerability"
aliases: ["CVE-2026-98914"]
title: "Linux amdgpu driver: unbounded ATOM command table nesting could loop kernel"
severity: "unknown"
cvss: null
epss: 0.00198
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["amd-gpu", "amdgpu", "infrastructure", "kernel", "linux", "workstations"]
not_affected_if: ["no-amd-gpu", "non-linux"]
published_at: "2026-10-23T12:18:25+00:00"
first_seen_at: "2026-10-23T21:57:33+00:00"
updated_at: "2026-10-25T12:38:50+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-98914", "first_seen_at": "2026-10-23T21:57:33+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-98914", "first_seen_at": "2026-10-25T12:38:50+00:00"}]
---

# Linux amdgpu driver: unbounded ATOM command table nesting could loop kernel

The amdgpu graphics driver in the Linux kernel parses ATOM BIOS command tables and did not limit how deeply they could nest. The fix caps nesting at 32 levels and returns -ELOOP when exceeded.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- Update the Linux kernel to a release that includes the upstream amdgpu ATOM nesting-depth fix (version unknown from sources)

## Timeline

- 2026-10-23T21:57:33+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-98914
- 2026-10-25T12:38:50+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-98914

## From the sources

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: cap ATOM command table nesting depth

Cap nesting at 32 levels with execute_depth and
return -ELOOP when exceeded.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_