OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-89814

HIGH · CVSS 7.8 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's AMDGPU driver, specifically in the handling of isolation indices for rings not assigned to a partition, which can lead to out-of-bounds array access. This flaw can trigger undefined behavior sanitizer (UBSAN) errors during SDMA submissions, potentially compromising system stability and security. Organizations using Linux systems with AMDGPU drivers should prioritize addressing this issue to mitigate risks associated with kernel-level vulnerabilities.

CVE
CVE-2026-89814
Severity
HIGH
CVSS
7.8
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: clamp the isolation index for rings outside a partition adev->isolation[] has one slot per partition, but a ring that is not assigned to one keeps AMDGPU_XCP_NO_PARTITION, which is ~0, so indexing the array with it is out of bounds. SDMA submissions hit this on both the isolation enforcement and the VM flush path and trip UBSAN. Fall back to the first slot the way the cleaner shader path already does, and stop taking the address before the ring type check that makes it relevant.