In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Add TLB flush after MES queue eviction/suspension
MES (Micro Engine Scheduler) does not perform heavy-weight TLB invalidation after unmapping queues, unlike HWS which does this automatically. This causes a race condition where in-flight DMA descriptors can access memory that has been unmapped, leading to page faults and GPU queue hangs during SVM page migration.
The issue manifests as KFDSVMRangeTest.MultiThreadMigrationTest failures on gfx1151 (Strix Point) with XNACK mode 1 enabled - the GPU compute queue hangs with packets submitted but never consumed.
Add kfd_flush_tlb() calls after MES queue removal in two locations: - evict_process_queues_cpsch(): after all queues removed during eviction - suspend_queues(): after debug/criu queue suspension (with mem_fence barrier)
This ensures all in-flight memory accesses from unmapped queues are flushed before memory is freed or migrated.
(cherry picked from commit f5c4f88e0f9c45a8fb9dfac0c1df726c95e41b77)
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-64k-modules-extraUpgrade kernel-develUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-64kUpgrade kernel-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade perfUpgrade kernel-headersUpgrade kernel-64k-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rtUpgrade kernel-64k-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade python3-perf | Oct 14, 2026 | Oct 14, 2026 |
| Oracle_linux | — | Upgrade kernel | Oct 22, 2026 | Sep 16, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Oct 8, 2026 | Sep 16, 2026 |
| Rocky_linux | — | Upgrade kernel-devel-matchedUpgrade kernel-debuginfoUpgrade kernelUpgrade rtlaUpgrade kernel-tools-libs-develUpgrade libperf-debuginfoUpgrade libperfUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perfUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade rvUpgrade kernel-rt-develUpgrade kernel-debug-devel-matchedUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rtUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debug-debuginfoUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-modules | Oct 16, 2026 | Oct 14, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub