CVE-2026-90286

Last refreshed2026-10-19

Status: UPDATED | Advisory ID: CVE-2026-90286

Key Details

CVE	CVE-2026-90286
CVSS Score / Version	8.8 (High) / CVSS v3.1
Updated	2026-10-19
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/gfx6: Use PFP on the compute queues too

On GFX6, the compute rings use the same CP path as

the graphics ring. The only difference is that they

don't support draw commands. (As opposed to GFX7 and

newer which have a separate command parser that is

called MEC for compute queues.)

This means that we have to take into consideration

that the PFP also exists on compute queues on GFX6:

Use PFP for register writes on both graphics and

compute queues.

In the pipeline sync, use the PFP to wait for the

previous fence (and not the ME) to prevent the PFP

from starting to execute the next submission while

the ME is still in the previous submission.

After a VM flush, emit PFP_SYNC_ME on compute

queues as well. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-90286
CVE	https://www.cve.org/CVERecord?id=CVE-2026-90286

Source

Reference

NVD

CVE