CVE-2026-23213: drm/amd/pm: Disable MMIO access during SMU Mode 1 reset

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-02-18 · updated 2026-10-30

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Disable MMIO access during SMU Mode 1 reset During Mode 1 reset, the ASIC undergoes a reset cycle and becomes temporarily inaccessible via PCIe. Any attempt to access MMIO registers during this window (e.g., from interrupt handlers or other driver threads) can result in uncompleted PCIe transactions, leading to NMI panics or system hangs. To prevent this, set the `no_hw_access` flag to true immediately after triggering the reset. This signals other driver components to skip register accesses while the device is offline. A memory barrier `smp_mb()` is added to ensure the flag update is globally visible to all cores before the driver enters the sleep/wait state. (cherry picked from commit 7edb503fe4b6d67f47d8bb0dfafb8e699bb0f8a4)

Affected products

Linux kernel: from 5.9 before 6.12.70; from 6.13 before 6.18.10; 6.19-rc1, 6.19-rc2, 6.19-rc3, 6.19-rc4 — fixed in 6.12.70, 6.18.10
Linux: 5.9 — fixed in 6.19

How to fix

Upgrade to a fixed version: Linux kernel 6.12.70, 6.18.10; Linux 6.19. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-23213 or the next vulnerability affects your stack