CVE-2026-23264: Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem"
Vulnerability summary
CVE-2026-23264 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.12% chance of exploitation in the next 30 days, higher than 1.7% of scored vulnerabilities.
Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 13 · Related 11Timeline
- 18-03-2026PublishedVulnerability first disclosed.
- 23-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" This reverts commit 7294863a6f01248d72b61d38478978d638641bee. This commit was erroneously applied again after commit 0ab5d711ec74 ("drm/amd: Refactor `amdgpu_aspm` to be evaluated per device") removed it, leading to very hard to debug crashes, when used with a system with two AMD GPUs of which only one supports ASPM. (cherry picked from commit 97a9689300eb2b393ba5efc17c8e5db835917080)
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.12%
Chance of exploitation in the next 30 days
Percentile
2%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.11% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu145 products
- linuxAll versions (No fix recorded) | < 6.8.0-117.117
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 6.8.0-1055.58
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 0ab5d711ec74d9e60673900974806b7688857947, < f02c9052aaa031ef3c2285d86a155d4263180ddd | ≥ 0ab5d711ec74d9e60673900974806b7688857947, < d2bddc2da2b3ba5d738877c476bf97932dba32e8 | ≥ 0ab5d711ec74d9e60673900974806b7688857947, < 5b794951541e84d2968980a68dd1ac38420f75f3 | ≥ 0ab5d711ec74d9e60673900974806b7688857947, < 5f645222eb30c91135119e12eccfd1b8ea88140e | ≥ 0ab5d711ec74d9e60673900974806b7688857947, < 243b467dea1735fed904c2e54d248a46fa417a2d | 0a9a60dcedaacde4b903337b7445cb431b4dd119 | ≥ 5.15.54, < 5.16 | 5.18
- linux_kernel≥ 5.15.54, < 5.16 | ≥ 5.18, < 6.1.163 | ≥ 6.2, < 6.6.124 | ≥ 6.7, < 6.12.70 | ≥ 6.13, < 6.18.10 | 6.19:rc1 | 6.19:rc2 | 6.19:rc3 | 6.19:rc4 | 6.19:rc5 | 6.19:rc6 | 6.19:rc7 | 6.19:rc8
Debian1 product
- linux< 6.1.164-1 | < 6.12.73-1 | < 6.18.10-1
3 vendors · 148 products
