6.9medium
SecMateSECMATE-2026-0037
VendorAMD
ProductAMD GPU Linux kernel driver
VectorCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CWECWE-476
Advisories
Timeline
Published
Sep 8, 2026
Summary
A NULL pointer dereference in the AMD GPU Linux kernel driver can allow a local user to crash the system, causing denial of service. The driver does not validate an internal reference during a graphics memory clear operation under certain compute-processing conditions. AMD lists Radeon Software for Linux 26.13 and Linux GPU Driver 31.40 as mitigations for the applicable products. Mitigations for affected embedded products are planned for October 2026; Radeon PRO V-series users should contact AMD. See AMD-SB-6034 for product-specific guidance.