CVE-2026-53293

drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG

MEDIUM

5.5

CVSS Score

Published: June 26, 2026 at 07:40 PM UTC

Updated: July 8, 2026 at 04:09 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG There were multiple issues in that code. First of all the order between the reset semaphore and the mm_lock was wrong (e.g. copy_to_user) was called while holding the lock. Then we allocated memory while holding the reset semaphore which is also a pretty big bug and can deadlock. Then we used down_read_trylock() instead of waiting for the reset to finish. (cherry picked from commit 361b6e6b303d4b691f6c5974d3eaab67ca6dd90e)

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v ≥ 6.10.14v ≥ 6.11.36.10.14 ≤ v < 6.116.11.3 ≤ v < 6.126.11.3 ≤ v < 6.12.916.12 ≤ v < 6.12.916.12 ≤ v < 6.18.336.12 ≤ v < 7.0.106.12 ≤ v < 7.16.13 ≤ v < 6.18.336.19 ≤ v < 7.0.106.6.55 ≤ v < 6.6.14117a98c942cb106ec08564e8f43b5470a4dd5d3f66.10.14 6.11.3 6.6.55 7.1 rc18361e3f7882876d98ba98cae0d3149450dd809129a98563345697bdb1d3410ff428473b2e781f4db9e823f307074c0f82b5f6044943b0086e3079bed

Vendor states this is fixed in 0ef196a208385b7d7da79f411c161b04e97283e2 (fixed)

Vendor states this is fixed in 5c29d20470d4566d1b68df57097d642d01f8b427 (fixed)

Vendor states this is fixed in 61957c2e467b39b528a290016367d32a433fa846 (fixed)

Vendor states this is fixed in 8c4254c8f5836e77ae83e7fc037f02b69f7a0977 (fixed)

Vendor states this is fixed in a31c3feb54b15a90232e497ad0e27e8a82052d8d (fixed)

Affected range stops below 6.11, so it looks safe — our inference, not a vendor statement

Vendor states this is fixed in 6.12 (unaffected)

Vendor states this is fixed in 6.12.91 (unaffected)

Vendor states this is fixed in 6.18.33 (unaffected)

Vendor states this is fixed in 6.6.141 (unaffected)

Vendor states this is fixed in 7.0.10 (unaffected)

Vendor states this is fixed in 7.1 (unaffected)