AZL-110588: CVE-2026-98914 affecting package kernel 6.6.157.1-1

Q: What condition is required to trigger the issue?

The issue is triggered when AMDGPU processes an ATOM command table with nesting deeper than 32 levels. The resolved behavior caps execution depth and returns -ELOOP when that limit is exceeded.

Q: What is the practical mitigation if the updated kernel cannot be deployed immediately?

The provided data does not identify a configuration workaround. Reducing exposure to untrusted or malformed ATOM command tables may be relevant, but no specific mitigation is stated.

Published Oct 23, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: cap ATOM command table nesting depth

Cap nesting at 32 levels with executedepth and return -ELOOP when exceeded.

Affected Software

1 affected component

azure-linux/kernel<=6.6.157.1-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Configuration
Cap ATOM command table nesting at 32 levels with execute_depth; return -ELOOP when the limit is exceeded.
Linux kernel drm/amdgpu ATOM command table execute_depth = 32

Event History

Oct 23, 2026

Advisory Published

via OSV·12:18 PM

Data Sourced

via OSV·12:18 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-98914

Frequently Asked Questions

What condition is required to trigger the issue?

The issue is triggered when AMDGPU processes an ATOM command table with nesting deeper than 32 levels. The resolved behavior caps execution depth and returns -ELOOP when that limit is exceeded.

What is the practical mitigation if the updated kernel cannot be deployed immediately?

The provided data does not identify a configuration workaround. Reducing exposure to untrusted or malformed ATOM command tables may be relevant, but no specific mitigation is stated.

AZL-110588: CVE-2026-98914 affecting package kernel 6.6.157.1-1

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What condition is required to trigger the issue?

What is the practical mitigation if the updated kernel cannot be deployed immediately?

Company

Resources

Contact

Frequently Asked Questions

What condition is required to trigger the issue?

What is the practical mitigation if the updated kernel cannot be deployed immediately?