CVE-2026-74638

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the drm/v3d component where concurrent timeout handlers are unsafe because the hardware uses a single global reset for multiple independent queues (BIN, RENDER, TFU, and CSD). A timeout on one queue triggers a global reset that stops and restarts the schedulers of all other queues. If another queue is simultaneously handling its own timeout, the drm sched stop() and drm sched start() functions may miscalculate job credits because the pending list is being modified concurrently. This leads to a broken credit count in the CL queue, resulting in a complete GPU hang and UI freeze. The issue occurs because the reset lock only covers the timedout job callback and not the scheduler's internal handling of the pending list.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.