CVE-2026-97424

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq

cp_ecc_error_irq is acquired in amdgpu_gfx_ras_late_init() but

released in gfx_v9_0_hw_fini(), so the put site has to query

amdgpu_irq_enabled() because the get is skipped on SR-IOV VF.

ras_late_init / ras_fini have no suspend counterpart, so move the

put to amdgpu_gfx_ras_suspend() / amdgpu_gfx_ras_fini() and add a

matching ras_suspend callback that is invoked from

amdgpu_ras_suspend() before disable_all_features(). The get and

put now sit in the same place and check the same condition (not

VF, funcs registered), no refcount querying needed.

An active flag gates ras_fini so the

suspend-then-unload-without-resume path falls into

amdgpu_ras_block_late_fini_default() instead of double-releasing

what ras_suspend already cleaned up.

Drop the cp_ecc_error_irq put from gfx_v9_0_hw_fini(). gfx_v8_0

manages cp_ecc_error_irq locally and is unaffecte

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References