Vulnerability in Linux
CVE-2026-23264
In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" This reverts commit 7294863a6f01248d72b61d38478978d638641bee. This commit was erroneously applied again after commit 0ab5d711ec74 ("drm/amd: Refactor `amdgpu_aspm` to be evaluated per device") removed it, leading to very hard to debug crashes, when used with a system with two AMD GPUs of which only one supports ASPM. (cherry picked from commit 97a9689300eb2b393ba5efc17c8e5db835917080)
EPSS: 0.001 (1.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions 6.6.124, 5.15.54, 6.18.10
- Linux Linux_kernel — versions 6.19
References
Frequently asked questions
- What is CVE-2026-23264?
- CVE-2026-23264 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2026-03-18.
- How severe is CVE-2026-23264?
- Medium severity. CVSS v3 base score is 5.5 out of 10.