Menu

Star on GitHub · 3.5k

CVE-2026-80919

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive ww_mutex acquire in amdgpu_devcoredump_format When dumping IB contents from a hung job, amdgpu_devcor…

Published Sep 9, 2026EPSS 0.20%

Overview

CVE-2026-80919 is a known-severity vulnerability. It was published on September 9, 2026.

Technical description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: fix recursive ww_mutex acquire in amdgpu_devcoredump_format

When dumping IB contents from a hung job, amdgpu_devcoredump_format()

acquired the VM root PD's reservation via amdgpu_vm_lock_by_pasid() and

then, for each IB, called amdgpu_bo_reserve() on the BO backing the IB.

Both reservations are reservation_ww_class_mutex objects and neither

used a ww_acquire_ctx, which trips lockdep:

WARNING: possible recursive locking detected

--------------------------------------------

kworker/u128:0 is trying to acquire lock:

ffff88838b16e1f0 (reservation_ww_class_mutex){+.+.}-{4:4},

at: amdgpu_devcoredump_format+0x1594/0x23f0 [amdgpu]

but task is already holding lock:

ffff8882f82681f0 (reservation_ww_class_mutex){+.+.}-{4:4},

at: amdgpu_devcoredump_format+0x1594/0x23f0 [amdgpu]

Possible unsafe locking scenario:

CPU0

----

lock(reservation_ww_class_mutex);

lock(reserv

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Frequently asked questions

What is CVE-2026-80919?

CVE-2026-80919 is a known-severity vulnerability. It was published on September 9, 2026.

How severe is CVE-2026-80919?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2026-80919?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2026-80919?

CyberStrike is an open-source, AI-augmented pentesting engine. Rather than flag a version number, it tests whether an issue like CVE-2026-80919 is actually reachable in your own applications and APIs, then verifies each finding before reporting it. That tells you if the weakness is a real, exploitable risk in your environment or a false positive you can safely deprioritize.

CyberStrike v2 is here — more intelligence, greater reach