https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 16:45:43 +0000 https://vulnerability.circl.lu/vuln/cve-2026-89811 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/amdkfd: Add TLB flush after MES queue eviction/suspension</p> <p>MES (Micro Engine Scheduler) does not perform heavy-weight TLB invalidation after unmapping queues, unlike HWS which does this automatically. This causes a race condition where in-flight DMA descriptors can access memory that has been unmapped, leading to page faults and GPU queue hangs during SVM page migration.</p> <p>The issue manifests as KFDSVMRangeTest.MultiThreadMigrationTest failures on gfx1151 (Strix Point) with XNACK mode 1 enabled - the GPU compute queue hangs with packets submitted but never consumed.</p> <p>Add kfd_flush_tlb() calls after MES queue removal in two locations: - evict_process_queues_cpsch(): after all queues removed during eviction - suspend_queues(): after debug/criu queue suspension (with mem_fence barrier)</p> <p>This ensures all in-flight memory accesses from unmapped queues are flushed before memory is freed or migrated.</p> <p>(cherry picked from commit f5c4f88e0f9c45a8fb9dfac0c1df726c95e41b77)</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>drm/amdkfd: Add TLB flush after MES queue eviction/suspension</p> <p>MES (Micro Engine Scheduler) does not perform heavy-weight TLB invalidation after unmapping queues, unlike HWS which does this automatically. This causes a race condition where in-flight DMA descriptors can access memory that has been unmapped, leading to page faults and GPU queue hangs during SVM page migration.</p> <p>The issue manifests as KFDSVMRangeTest.MultiThreadMigrationTest failures on gfx1151 (Strix Point) with XNACK mode 1 enabled - the GPU compute queue hangs with packets submitted but never consumed.</p> <p>Add kfd_flush_tlb() calls after MES queue removal in two locations: - evict_process_queues_cpsch(): after all queues removed during eviction - suspend_queues(): after debug/criu queue suspension (with mem_fence barrier)</p> <p>This ensures all in-flight memory accesses from unmapped queues are flushed before memory is freed or migrated.</p> <p>(cherry picked from commit f5c4f88e0f9c45a8fb9dfac0c1df726c95e41b77)</p> https://vulnerability.circl.lu/vuln/cve-2026-89811