CVE-2026-46276: drm/amdgpu: fix zero-size GDS range init on RDNA4
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix zero-size GDS range init on RDNA4
RDNA4 (GFX 12) hardware removes the GDS, GWS, and OA on-chip memory resources. The gfxv120 initialisation code correctly leaves adev->gds.gdssize, adev->gds.gwssize, and adev->gds.oasize at zero to reflect this.
amdgputtminit() unconditionally calls amdgputtminitonchip() for each of these resources regardless of size. When the size is zero, amdgputtminitonchip() forwards the call to ttmrangemaninit(), which calls drmmminit(mm, 0, 0). drmmminit() immediately fires DRMMMBUGON(start + size <= start) -- trivially true when size is zero -- crashing the kernel during modprobe of amdgpu on an RX 9070 XT.
Guard against this by returning 0 early from amdgputtminitonchip() when sizeinpage is zero. This skips TTM resource manager registration for hardware resources that are absent, without affecting any other GPU type.
DRMMMBUGON() only asserts if CONFIGDRMDEBUGMM is enabled in the kernel config. This is apparently rarely enabled as these chips have been in the market for over a year and this issue was only reported now.
Oops-Analysis: http://oops.fenrus.org/reports/bugzilla.korg/221376/report.html (cherry picked from commit 5719ce5865279cad4fd5f01011fe037168503f2d)
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46276?
CVE-2026-46276 has a risk rating of 22.
How do I fix CVE-2026-46276?
To address CVE-2026-46276, update to the latest version of the AMD amdgpu driver in the Linux kernel that includes the fix.
Which systems are affected by CVE-2026-46276?
CVE-2026-46276 affects systems running AMD amdgpu drivers on RDNA4 (GFX 12) hardware.
What impact does CVE-2026-46276 have on my system?
CVE-2026-46276 can lead to improper initialization of memory resources on RDNA4 hardware, potentially causing instability.
When was CVE-2026-46276 published?
CVE-2026-46276 was published on June 8, 2026.