CVE-2026-23213 drm/amd/pm: Disable MMIO access during SMU Mode 1 reset
A race condition in the AMD GPU driver during SMU Mode 1 reset can cause system hangs or panics due to invalid MMIO access.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-23213?
CVE-2026-23213 is a medium-severity vulnerability in Linux kernel, published on 18 Feb 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/pm: Disable MMIO access during SMU Mode 1 reset
During Mode 1 reset, the ASIC undergoes a reset cycle and becomes temporarily inaccessible via PCIe. Any attempt to access MMIO registers during this window (e.g., from interrupt handlers or other driver threads) can result in uncompleted PCIe transactions, leading to NMI panics or system hangs.
To prevent this, set the `no_hw_access` flag to true immediately after triggering the reset. This signals other driver components to skip register accesses while the device is offline.
A memory barrier `smp_mb()` is added to ensure the flag update is globally visible to all cores before the driver enters the sleep/wait state.
(cherry picked from commit 7edb503fe4b6d67f47d8bb0dfafb8e699bb0f8a4)
Which versions are affected by CVE-2026-23213?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-23213?
Apply the vendor's patch.
Is CVE-2026-23213 being exploited?
There is no known exploitation of CVE-2026-23213 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-77858, BELL-CVE-2026-23213, DEBIAN-CVE-2026-23213, GHSA-h85r-3jrw-9546, ROOT-OS-DEBIAN-11-CVE-2026-23213, ROOT-OS-DEBIAN-12-CVE-2026-23213 and 3 more.