CVE-2026-98270

CVE-2026-98270

published October 6, 2026

CVSS
—
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: check ras and obj before dereference

nbio_v7_9_handle_ras_controller_intr_no_bifring() dereferences ras and obj

without checking either for NULL. Both amdgpu_ras_get_context() and

amdgpu_ras_find_obj() can return NULL, e.g. during the window between

adev->nbio.ras being set (early in amdgpu_ras_init(), by design, to

enable the fatal-error interrupt as soon as possible) and the PCIE_BIF

ras object actually being created in RAS late_init. Any interrupt in that

window crashes in hard-IRQ context.

This is analogous to commit d190b459b2a4 ("drm/amdgpu: the warning

dereferencing obj for nbio_v7_4"), which fixed the same issue in the

nbio_v7_4 handler.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

(cherry picked from commit c7071767a50a32ed727cf800ac84372429e3b4b3)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00175 · 6.7th percentile
Published
2026-10-06T13:18Z
References (5)
EPSS history
Timeline
  • 07 OCT 03:43Z
    EPSS moved — → 0%
    epss
  • 06 OCT 08:45Z
    drm/amdgpu: check ras and obj before dereference
    cvelistv5