CVE-2026-74450: drm/amd/pm: fix pptable use-after-free
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/pm: fix pptable use-after-free
amdgpudpmgetpptable() returns a pointer to a driver-owned power table after dropping adev->pm.mutex. The sysfs path then copies from that pointer. A concurrent pptable write can replace and free the allocation during the copy, causing a use-after-free.
Change the DPM interface to copy into caller-provided storage while the mutex is held. Keep the size-only query for attribute discovery without exposing the driver-owned pointer.
(cherry picked from commit f6eed7acfd30099ef7baeb6ba45bb59daad80631)
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74450?
The severity of CVE-2026-74450 is rated at risk level 37.
What type of vulnerability is CVE-2026-74450?
CVE-2026-74450 is classified as a Use After Free vulnerability.
How do I fix CVE-2026-74450?
To fix CVE-2026-74450, you should apply the latest updates from the Linux kernel that address this vulnerability.
What impact does CVE-2026-74450 have on Linux kernel security?
CVE-2026-74450 can lead to potential exploitation due to the use-after-free issue in the power table, affecting system stability and security.
When was CVE-2026-74450 published?
CVE-2026-74450 was published on August 15, 2026.