{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98898", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.379Z", "datePublished": "2026-10-23T11:54:07.890Z", "dateUpdated": "2026-10-26T06:56:25.439Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-26T06:56:25.439Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/pm/si: Don't schedule thermal work when queue isn't initialized\n\nWhen DPM is turned off with the amdgpu.dpm=0 module parameter,\nthe thermal work queue isn't initialized so we shouldn't\nschedule any work on it.\n\n(cherry picked from commit bd018d36171a695952c6d391471c279c9e05c8b2)"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c"], "versions": [{"version": "1919696eedc1ed5c3ace229576e4fa322fb256dd", "lessThan": "2c08ae91df3cf11d517dc1273195f7b1df2a0ddb", "status": "affected", "versionType": "git"}, {"version": "1919696eedc1ed5c3ace229576e4fa322fb256dd", "lessThan": "7987c5abdf537663b0957de521edefe77ae12842", "status": "affected", "versionType": "git"}, {"version": "1919696eedc1ed5c3ace229576e4fa322fb256dd", "lessThan": "8c9e7265b3379eb2ce1758b73c4ffa2606ae2256", "status": "affected", "versionType": "git"}, {"version": "1919696eedc1ed5c3ace229576e4fa322fb256dd", "lessThan": "2750f52b58d92ca52a5496c00db8abf925103a27", "status": "affected", "versionType": "git"}, {"version": "1919696eedc1ed5c3ace229576e4fa322fb256dd", "lessThan": "ac0250da54afb519fab98478e2e1d9e51d4737fd", "status": "affected", "versionType": "git"}, {"version": "1919696eedc1ed5c3ace229576e4fa322fb256dd", "lessThan": "52c4c623474df0e19efa158057966f2a149bda28", "status": "affected", "versionType": "git"}, {"version": "1919696eedc1ed5c3ace229576e4fa322fb256dd", "lessThan": "f8922d5a946699fc2bdc7660e6778bd6726bf8b8", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c"], "versions": [{"version": "4.9", "status": "affected"}, {"version": "0", "lessThan": "4.9", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.271", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.222", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.189", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.158", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.111", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.53", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.9", "versionEndExcluding": "5.10.271"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.9", "versionEndExcluding": "5.15.222"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.9", "versionEndExcluding": "6.1.189"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.9", "versionEndExcluding": "6.6.158"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.9", "versionEndExcluding": "6.12.111"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.9", "versionEndExcluding": "6.18.53"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.9", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/2c08ae91df3cf11d517dc1273195f7b1df2a0ddb"}, {"url": "https://git.kernel.org/stable/c/7987c5abdf537663b0957de521edefe77ae12842"}, {"url": "https://git.kernel.org/stable/c/8c9e7265b3379eb2ce1758b73c4ffa2606ae2256"}, {"url": "https://git.kernel.org/stable/c/2750f52b58d92ca52a5496c00db8abf925103a27"}, {"url": "https://git.kernel.org/stable/c/ac0250da54afb519fab98478e2e1d9e51d4737fd"}, {"url": "https://git.kernel.org/stable/c/52c4c623474df0e19efa158057966f2a149bda28"}, {"url": "https://git.kernel.org/stable/c/f8922d5a946699fc2bdc7660e6778bd6726bf8b8"}], "title": "drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "2c08ae91df3cf11d517dc1273195f7b1df2a0ddb", "status": "affected", "version": "1919696eedc1ed5c3ace229576e4fa322fb256dd", "versionType": "git"}, {"lessThan": "7987c5abdf537663b0957de521edefe77ae12842", "status": "affected", "version": "1919696eedc1ed5c3ace229576e4fa322fb256dd", "versionType": "git"}, {"lessThan": "8c9e7265b3379eb2ce1758b73c4ffa2606ae2256", "status": "affected", "version": "1919696eedc1ed5c3ace229576e4fa322fb256dd", "versionType": "git"}, {"lessThan": "2750f52b58d92ca52a5496c00db8abf925103a27", "status": "affected", "version": "1919696eedc1ed5c3ace229576e4fa322fb256dd", "versionType": "git"}, {"lessThan": "ac0250da54afb519fab98478e2e1d9e51d4737fd", "status": "affected", "version": "1919696eedc1ed5c3ace229576e4fa322fb256dd", "versionType": "git"}, {"lessThan": "52c4c623474df0e19efa158057966f2a149bda28", "status": "affected", "version": "1919696eedc1ed5c3ace229576e4fa322fb256dd", "versionType": "git"}, {"lessThan": "f8922d5a946699fc2bdc7660e6778bd6726bf8b8", "status": "affected", "version": "1919696eedc1ed5c3ace229576e4fa322fb256dd", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.9"}, {"lessThan": "4.9", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.271", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.222", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.189", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.158", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.111", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.53", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/pm/si: Don't schedule thermal work when queue isn't initialized\n\nWhen DPM is turned off with the amdgpu.dpm=0 module parameter,\nthe thermal work queue isn't initialized so we shouldn't\nschedule any work on it.\n\n(cherry picked from commit bd018d36171a695952c6d391471c279c9e05c8b2)"}], "id": "CVE-2026-98898", "lastModified": "2026-10-26T07:17:15.073", "metrics": {}, "published": "2026-10-23T12:18:23.777", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/2750f52b58d92ca52a5496c00db8abf925103a27"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/2c08ae91df3cf11d517dc1273195f7b1df2a0ddb"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/52c4c623474df0e19efa158057966f2a149bda28"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/7987c5abdf537663b0957de521edefe77ae12842"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/8c9e7265b3379eb2ce1758b73c4ffa2606ae2256"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/ac0250da54afb519fab98478e2e1d9e51d4737fd"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f8922d5a946699fc2bdc7660e6778bd6726bf8b8"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized", "id": "2559597", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2559597"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.7", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-908", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ndrm/amd/pm/si: Don't schedule thermal work when queue isn't initialized\nWhen DPM is turned off with the amdgpu.dpm=0 module parameter,\nthe thermal work queue isn't initialized so we shouldn't\nschedule any work on it.\n(cherry picked from commit bd018d36171a695952c6d391471c279c9e05c8b2)", "A flaw was found in the Linux kernel's AMD GPU driver. When dynamic power management (DPM) is disabled, the driver attempts to schedule thermal management tasks on an uninitialized work queue upon receiving an interrupt. A local user could exploit this condition to trigger a kernel crash, resulting in a Denial of Service (DoS)."], "name": "CVE-2026-98898", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-23T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98898\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98898\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98898.mbox"], "threat_severity": "Moderate"}