-

CVE-2026-68102

drm/amdgpu: fix aperture mapping leak

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: fix aperture mapping leak

amdgpu_pci_remove() calls drm_dev_unplug() before invoking the driver
fini routines. This causes drm_dev_enter() in amdgpu_ttm_fini() to
always return false, so iounmap(aper_base_kaddr) never runs on normal
driver unload, leaving an orphaned entry in the x86 PAT interval tree.

On connected_to_cpu hardware, the aperture is mapped write-back (WB) via
ioremap_cache(). On reload, IP discovery calls memremap(..., MEMREMAP_WC)
over the same range. The WC vs WB conflict causes:

  ioremap error for 0x..., requested 0x1, got 0x0
  amdgpu: discovery failed: -2

Fix by switching to devres-managed mappings so cleanup is guaranteed
regardless of drm_dev_enter() state:

- connected_to_cpu path: devm_memremap(MEMREMAP_WB). For
  IORESOURCE_SYSTEM_RAM ranges this takes the try_ram_remap() shortcut,
  returning __va(offset) from the existing kernel direct map. No new
  ioremap VA or PAT entry is created, so there is nothing to orphan.

- dGPU path: devm_ioremap_wc() registers iounmap() as a devres action,
  guaranteeing cleanup at device_del() time.

Also remove iounmap(aper_base_kaddr) from amdgpu_device_unmap_mmio()
since the mapping is now devres-owned.

v2: Remove redundant x86_64 guard (Lijo)

(cherry picked from commit d871e99879cb5fd1fa798b006b4888887e63a17a)
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 9d0af8b4def0de6b734ec8db08e96da0458facb6
Version < 67bc3647e418e23dc0d17604bdba634a73de809f
Status affected
Version 9d0af8b4def0de6b734ec8db08e96da0458facb6
Version < a343d028ad6c174da8dc6af560c51e6d140a6727
Status affected
Version 9d0af8b4def0de6b734ec8db08e96da0458facb6
Version < 6405c4e75b3bcf0e72bd7a0ff5f1ed0c475e23aa
Status affected
Version 9d0af8b4def0de6b734ec8db08e96da0458facb6
Version < f5988b5c300a32ff751724ffd33d5a8d5873e4a7
Status affected
Version 9d0af8b4def0de6b734ec8db08e96da0458facb6
Version < ea772a440d56b285f4d491affac50ecd41f6b402
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.13
Status affected
Version 0
Version < 5.13
Status unaffected
Version <= 6.6.*
Version 6.6.148
Status unaffected
Version <= 6.12.*
Version 6.12.101
Status unaffected
Version <= 6.18.*
Version 6.18.42
Status unaffected
Version <= 7.1.*
Version 7.1.6
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.064
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/67bc3647e418e23dc0d17604bdba634a73de809f
https://git.kernel.org/stable/c/a343d028ad6c174da8dc6af560c51e6d140a6727
https://git.kernel.org/stable/c/6405c4e75b3bcf0e72bd7a0ff5f1ed0c475e23aa
https://git.kernel.org/stable/c/f5988b5c300a32ff751724ffd33d5a8d5873e4a7
https://git.kernel.org/stable/c/ea772a440d56b285f4d491affac50ecd41f6b402