CVE-2026-80728
In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amdgpu: fix aperture mapping leak" devres teardown is LIFO. The aperture devres node was registered after the DRM device node, so devres_release_all() unmaps the aperture before the DRM device release callback fires amdgpu_device_fini_sw(). IP sw_fini callbacks (e.g. vcn_v4_0_sw_fini) write to fw_shared through a pointer derived from aper_base_kaddr, causing a kernel page fault on probe failure / rollback: BUG: unable to handle page fault ... PMD 0 RIP: vcn_v4_0_sw_fini+0x7b/0x170 [amdgpu] Call Trace: amdgpu_device_fini_sw amdgpu_driver_release_kms devm_drm_dev_init_release devres_release_all This reverts commit d871e99879cb5fd1fa798b006b4888887e63a17a. (cherry picked from commit 336e0cd576817ac64a4b394ca2b3680029f3e37f)
Affected versions
Linux kernel versions
6.6.148,
6.12.101,
6.18.42,
7.1.6
and later are affected. Fixed in
6.6.152,
6.12.104,
6.18.45,
7.1.9
and their respective stable series.
References
5 totalFrequently asked questions
-
What is CVE-2026-80728?
CVE-2026-80728 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.6.148 onward and has been patched in 6.6.152, 6.12.104, 6.18.45 and others. CVE-2026-80728 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-80728?
Yes. CVE-2026-80728 has been patched. Fixed versions include 6.6.152, 6.12.104, 6.18.45 and others. If you are running Linux kernel 6.6.148 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-80728 actively exploited?
No. CVE-2026-80728 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.