VDB

CVE-2026-31462

CVE-2026-31462 PUBLISHED

drm/amdgpu: prevent immediate PASID reuse case

Reported by linux · Published April 22, 2026

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent immediate PASID reuse case PASID resue could cause interrupt issue when process immediately runs into hw state left by previous process exited with the same PASID, it's possible that page faults are still pending in the IH ring buffer when the process exits and frees up its PASID. To prevent the case, it uses idr cyclic allocator same as kernel pid's. (cherry picked from commit 8f1de51f49be692de137c8525106e0fce2d1912d)

EPSS 0.16% · 4.7th percentile

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
LinuxLinuxc0b3882836de8ac991b626823966f385555bbcff, 9e5ebfe99b223bb0eb9c50a125c9c02f4ef4c71b, 51ccaf0e30c303149244c34820def83d74c86288, 14b81abe7bdc25f8097906fc2f91276ffedb2d26

Risk scores

EPSS Score
0.16%
4.7th percentile

Affected products

VendorProductVersions
LinuxLinux02208441cc3a5110191996bb129db39ff10e7395, 02208441cc3a5110191996bb129db39ff10e7395, 02208441cc3a5110191996bb129db39ff10e7395
LinuxLinux4.15, 0, 6.1.191
linuxlinux_kernel4.15, 4.15, 4.15
LinuxLinux02208441cc3a5110191996bb129db39ff10e7395, 02208441cc3a5110191996bb129db39ff10e7395, 02208441cc3a5110191996bb129db39ff10e7395

Timeline

  • Apr 22, 2026 CVE Published
  • Apr 23, 2026 Security Advisory (97 in total, the first dated here)
  • May 18, 2026 EPSS Score (25 in total, the first dated here)
  • Jul 16, 2026 Coalition ESS Score
  • Aug 11, 2026 Distribution Patch (92 in total, the first dated here)
  • Oct 30, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2026-31462
vulnetix vdb fixes CVE-2026-31462

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2026-31462/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›