CVE-2026-74450

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix pptable use-after-free amdgpu_dpm_get_pp_table() returns a pointer to a driver-owned power table after dropping adev->pm.mutex. The sysfs path then copies from that pointer. A concurrent pp_table write can replace and free the allocation during the copy, causing a use-after-free. Change the DPM interface to copy into caller-provided storage while the mutex is held. Keep the size-only query for attribute discovery without exposing the driver-owned pointer. (cherry picked from commit f6eed7acfd30099ef7baeb6ba45bb59daad80631)

Package Linux Kernel
Published 2026-08-15
Last modified 2026-08-15
Patch available
Yes

Affected versions

Linux kernel versions 4.9 and later are affected. Fixed in 7.1.8, 7.2-rc6 and their respective stable series.

Affected from
≥ 4.9
Fixed in
✓ 7.1.8 7.1.x ✓ 7.2-rc6

References

2 total

Frequently asked questions

  • What is CVE-2026-74450?

    CVE-2026-74450 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 4.9 onward and has been patched in 7.1.8 and 7.2-rc6. CVE-2026-74450 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

  • Is there a patch available for CVE-2026-74450?

    Yes. CVE-2026-74450 has been patched. Fixed versions include 7.1.8 and 7.2-rc6. If you are running Linux kernel 4.9 or later up to the fix versions, apply the relevant patch for your kernel branch.

  • Is CVE-2026-74450 actively exploited?

    No. CVE-2026-74450 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

Back to
All CVEs
View on
NVD / NIST