CVE-2026-53293None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG There were multiple issues in that code. First of all the order between the reset semaphore and the mm_lock was wrong (e.g. c…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.1%
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG
There were multiple issues in that code.
First of all the order between the reset semaphore and the mm_lock was wrong (e.g. copy_to_user) was called while holding the lock.
Then we allocated memory while holding the reset semaphore which is also a pretty big bug and can deadlock.
Then we used down_read_trylock() instead of waiting for the reset to finish.
(cherry picked from commit 361b6e6b303d4b691f6c5974d3eaab67ca6dd90e)
Linux >= 8361e3f7882876d98ba98cae0d3149450dd80912 < 8c4254c8f5836e77ae83e7fc037f02b69f7a0977Linux >= 9e823f307074c0f82b5f6044943b0086e3079bed < 61957c2e467b39b528a290016367d32a433fa846Linux >= 9e823f307074c0f82b5f6044943b0086e3079bed < a31c3feb54b15a90232e497ad0e27e8a82052d8dLinux >= 9e823f307074c0f82b5f6044943b0086e3079bed < 5c29d20470d4566d1b68df57097d642d01f8b427Linux >= 9e823f307074c0f82b5f6044943b0086e3079bed < 0ef196a208385b7d7da79f411c161b04e97283e2Linux 17a98c942cb106ec08564e8f43b5470a4dd5d3f6Linux 9a98563345697bdb1d3410ff428473b2e781f4dbLinux >= 6.6.55 < 6.6.141Linux >= 6.10.14 < 6.11Linux >= 6.11.3 < 6.12Linux 6.12Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses