Linux Kernel AMD GPU ASPM Handling Crash Vulnerability

Vulnerability

A vulnerability has been identified in the Linux kernel's handling of Active State Power Management (ASPM) for AMD GPUs. This issue arises from a commit that was incorrectly reapplied, leading to crashes in systems with two AMD GPUs, where only one supports ASPM. The problem was introduced when the ASPM evaluation was not properly managed per device, causing difficult-to-debug errors.

Impact

The vulnerability can lead to system crashes, particularly in environments with multiple AMD GPUs.

Reproduction

The vulnerability can be reproduced by using a system with two AMD GPUs, where only one GPU supports ASPM. The incorrect handling of ASPM in the GPU driver will lead to crashes that are hard to diagnose.

Remediation

Users can apply the latest patches from the Linux kernel stable tree to address this vulnerability.

Added: Mar 18, 2026, 7:48 PM
Updated: Mar 18, 2026, 7:48 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.0
remediation
7.7
relevance
4.1
threat
4.8
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.