CVE-2026-23264

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-23264
In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" This reverts commit 7294863a6f01248d72b61d38478978d638641bee. This commit was erroneously applied again after commit 0ab5d711ec74 ("drm/amd: Refactor `amdgpu_aspm` to be evaluated per device") removed it, leading to very hard to debug crashes, when used with a system with two AMD GPUs of which only one supports ASPM. (cherry picked from commit 97a9689300eb2b393ba5efc17c8e5db835917080)

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/243b467dea1735fed904c2e54d248a46fa417a2d Patch
https://git.kernel.org/stable/c/5b794951541e84d2968980a68dd1ac38420f75f3 Patch
https://git.kernel.org/stable/c/5f645222eb30c91135119e12eccfd1b8ea88140e Patch
https://git.kernel.org/stable/c/d2bddc2da2b3ba5d738877c476bf97932dba32e8 Patch
https://git.kernel.org/stable/c/f02c9052aaa031ef3c2285d86a155d4263180ddd Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*
History

29 May 2026, 18:44

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: Revertir 'drm/amd: Comprobar si ASPM está habilitado desde el subsistema PCIe' Esto revierte el commit 7294863a6f01248d72b61d38478978d638641bee. Este commit fue aplicado erróneamente de nuevo después del commit 0ab5d711ec74 ('drm/amd: Refactorizar amdgpu_aspm para ser evaluado por dispositivo') lo eliminó, lo que llevó a fallos muy difíciles de depurar, cuando se usaba con un sistema con dos GPU AMD de las cuales solo una soporta ASPM. (seleccionado de forma selectiva del commit 97a9689300eb2b393ba5efc17c8e5db835917080)
CPE cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:rc8:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/243b467dea1735fed904c2e54d248a46fa417a2d - () https://git.kernel.org/stable/c/243b467dea1735fed904c2e54d248a46fa417a2d - Patch
References () https://git.kernel.org/stable/c/5b794951541e84d2968980a68dd1ac38420f75f3 - () https://git.kernel.org/stable/c/5b794951541e84d2968980a68dd1ac38420f75f3 - Patch
References () https://git.kernel.org/stable/c/5f645222eb30c91135119e12eccfd1b8ea88140e - () https://git.kernel.org/stable/c/5f645222eb30c91135119e12eccfd1b8ea88140e - Patch
References () https://git.kernel.org/stable/c/d2bddc2da2b3ba5d738877c476bf97932dba32e8 - () https://git.kernel.org/stable/c/d2bddc2da2b3ba5d738877c476bf97932dba32e8 - Patch
References () https://git.kernel.org/stable/c/f02c9052aaa031ef3c2285d86a155d4263180ddd - () https://git.kernel.org/stable/c/f02c9052aaa031ef3c2285d86a155d4263180ddd - Patch

18 Mar 2026, 18:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-18 18:16

Updated : 2026-05-29 18:44

NVD link : CVE-2026-23264

Mitre link : CVE-2026-23264

CVE.ORG link : CVE-2026-23264

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo