CVE-2026-98779: drm/amdgpu: fix ACP MFD device leak on init failure
drm/amdgpu: fix ACP MFD device leak on init failure
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.113-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 7.2.10-1 - Upgrade
Upgrade
debian/linux-6.12to a version that resolves this vulnerability.Fixed in 6.12.113-1~deb12u1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 5.10.273 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 5.15.224 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.1.191 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.6.160 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.113 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.18.56 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 7.2.10 - Upgrade
Upgrade
azurelinux/kernelto a version that resolves this vulnerability.Fixed in 6.6.161.1-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch 63da68d6a2279ec945581c990c5a59a5ae8b5560
Event History
Frequently Asked Questions
Under what conditions can the device leak occur?
The leak occurs only after ACP child devices have been successfully registered through mfd_add_devices(). A subsequent failure while attaching a child to the ACP power domain, an ACP reset timeout, or a clock-enable timeout can leave those registered child platform devices unreleased.
Is a failure from mfd_add_devices() itself affected?
No. The existing cleanup path remains in place for mfd_add_devices() failures because the MFD core already rolls back partially registered child devices in that case.
What is the impact of the corrected failure handling?
On failures after child-device registration, the corrected path removes children from the ACP power domain and unregisters the MFD devices. This prevents registered ACP child platform devices from being left behind after initialization fails.