{
  "cveId": "CVE-2026-98389",
  "url": "https://patchblox.com/security/cve/CVE-2026-98389",
  "summary": "CVE-2026-98389 is fixed in linux on 1 platform by DEBIAN-CVE-2026-98389 (version 7.2.7-1), released October 16, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "drm/amdgpu: skip gfx switch_power_profile during GPU reset",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  drm/amdgpu: skip gfx switch_power_profile during GPU reset  During resume from GPU reset, the gfx idle work may invoke switch_power_profile before the reset completes. This causes the following assert error because the register access occurs without first releasing the GPU reset semaphore:  [ 1576.768935] CR2: 0000559ea133ead0 CR3: 00000002e6c42000 CR4: 0000000000350ef0 [ 1576.768940] Call Trace: [ 1576.768944]  \u003CTASK\u003E [ 1576.768953]  amdgpu_device_rreg\u002B0x21/0x50 [amdgpu] [ 1576.769158]  smu_msg_v1_send_msg\u002B0x1a4/0x6e0 [amdgpu] [ 1576.769437]  smu_cmn_send_smc_msg_with_params_ext\u002B0xba/0x120 [amdgpu] [ 1576.769721]  smu_cmn_send_smc_msg_with_param\u002B0x33/0x40 [amdgpu] [ 1576.769993]  smu_v13_0_0_set_power_profile_mode\u002B0x192/0x2b0 [amdgpu] [ 1576.770267]  smu_bump_power_profile_mode\u002B0x5d/0x80 [amdgpu] [ 1576.770538]  smu_switch_power_profile\u002B0xa4/0xf0 [amdgpu] [ 1576.770839]  amdgpu_dpm_switch_power_profile\u002B0x6f/0x90 [amdgpu] [ 1576.771210]  amdgpu_gfx_profile_idle_work_handler\u002B0xe9/0x130 [amdgpu] [ 1576.771460]  process_one_work\u002B0x23e/0x6f0 [ 1576.771491]  worker_thread\u002B0x1c4/0x380 [ 1576.771506]  kthread\u002B0x10c/0x150 [ 1576.771512]  ? __pfx_worker_thread\u002B0x10/0x10 [ 1576.771518]  ? __pfx_kthread\u002B0x10/0x10 [ 1576.771530]  ret_from_fork\u002B0x314/0x390 [ 1576.771537]  ? __pfx_kthread\u002B0x10/0x10 [ 1576.771546]  ret_from_fork_asm\u002B0x1a/0x30  (cherry picked from commit d93b1ff538ce9750c01e0dd0aa62575579c0fc08)",
  "published": "2026-10-14T14:17:49Z",
  "severity": "Moderate",
  "cvss": 4.1,
  "epss": 0.00198,
  "epssPercentile": 0.09624,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98389",
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.2.7-1",
      "fix": "DEBIAN-CVE-2026-98389",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-98389",
      "released": "2026-10-16T15:52:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}