PT-2026-26124 · Amd+3 · Amdgpu+3

Published 2026-01-01 · Updated 2026-05-29 · CVE-2026-23264

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contained an issue where a reverted commit related to AMD GPU ASPM (Active State Power Management) was erroneously reapplied. This reapplication, following a refactoring of the amdgpu aspm evaluation, resulted in difficult-to-debug crashes specifically on systems equipped with two AMD GPUs, where only one supports ASPM. The problematic commit ID is 7294863a6f01248d72b61d38478978d638641bee, and the refactoring commit is 0ab5d711ec74. The fix involves reverting the problematic commit again, as cherry-picked from commit 97a9689300eb2b393ba5efc17c8e5db835917080.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2026-03449

CVE-2026-23264

OPENSUSE-SU-2026:20826-1

SUSE-SU-2026:21841-1

SUSE-SU-2026:21845-1

SUSE-SU-2026:21860-1

SUSE-SU-2026:21876-1

SUSE-SU-2026:21877-1

SUSE-SU-2026:21916-1

SUSE-SU-2026:21919-1

SUSE-SU-2026:2217-1

USN-8278-1

USN-8278-2

USN-8289-1

USN-8289-2

USN-8296-1

USN-8296-2

Affected Products

Amdgpu

Linuxmint

Linux Kernel

Ubuntu

References · 230

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23264.json · Exploit
• https://ubuntu.com/security/CVE-2026-23107 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23088 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40149 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23038 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71220 · Vendor Advisory
• https://git.kernel.org/stable/c/f02c9052aaa031ef3c2285d86a155d4263180ddd · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-23264 · Security Note
• https://ubuntu.com/security/CVE-2026-23140 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23105 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71189 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23058 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23190 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23163 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03449 · Security Note