CVE-2026-68237
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix indefinite fence wait during GPU reset pre_reset only force-completes fences of MAPPED queues. A queue in any other state (e.g. mid-eviction) keeps its last_fence pending; after a GPU reset that fence never signals, so the eviction/suspend worker and process teardown (amdgpu_evf_mgr_flush_suspend) wait on it forever and wedge the machine: INFO: task kworker/6:28 blocked for more than 120 seconds. Workqueue: events amdgpu_eviction_fence_suspend_worker [amdgpu] Call Trace: dma_fence_wait_timeout+0x7e/0x130 amdgpu_userq_evict+0x67/0x140 [amdgpu] amdgpu_eviction_fence_suspend_worker+0xd8/0x160 [amdgpu] process_scheduled_works+0xa6/0x420 Force-complete every queue's fence regardless of state. The unmap and mark-hung step stays gated on MAPPED, since unmapping a queue that is not mapped is invalid. (cherry picked from commit 9102b39fa924dcc3dc75a3137bfa9633c40b88c0)
How to fix
- Linux Linux3085ae8695e025b39d208f288c6265edc75abbe8, 5d75ec2e5f1736c2f10c7d6f4565bf1bf29f29a7 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 290f46cf5726509f55fac4c7abe9b9d311aa5a3a ≤ v < 3085ae8695e025b39d208f288c6265edc75abbe8, 290f46cf5726509f55fac4c7abe9b9d311aa5a3a ≤ v < 5d75ec2e5f1736c2f10c7d6f4565bf1bf29f29a7, 6.19 | 3085ae8695e025b39d208f288c6265edc75abbe8, 5d75ec2e5f1736c2f10c7d6f4565bf1bf29f29a7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.