CVE-2026-89828

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the amdgpu vram mgr init() function where drmm cgroup register region() is called before INIT LIST HEAD() and gpu buddy init(). If drmm cgroup register region() fails, the function returns early, bypassing the initialization of the list and buddy allocator. Because adev->mman.initialized is already set to true, a failure triggers amdgpu ttm fini(), which subsequently calls amdgpu vram mgr fini(). This leads to a kernel panic during the module load error path due to NULL pointer dereferences when list for each entry safe() is called on reservations pending and reserved pages, and when gpu buddy fini() iterates through free trees[] via for each free tree() while mm->free trees is NULL.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.