{"id":3380,"date":"2026-09-04T04:59:40","date_gmt":"2026-09-03T20:59:40","guid":{"rendered":"https:\/\/www.54iter.cn\/?p=3380"},"modified":"2026-09-04T04:59:40","modified_gmt":"2026-09-03T20:59:40","slug":"cve-2026-80728","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-80728","title":{"rendered":"CVE-2026-80728 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nRevert &#8220;drm\/amdgpu: f"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>Revert &#8220;drm\/amdgpu: fix aperture mapping leak&#8221;<\/p>\n<p>devres teardown is LIFO. The aperture devres node was registered after<br \/>\nthe DRM device node, so devres_release_all() unmaps the aperture before<br \/>\nthe DRM device release callback fires amdgpu_device_fini_sw(). IP<br \/>\nsw_fini callbacks (e.g. vcn_v4_0_sw_fini) write to fw_shared through a<br \/>\npointer derived from aper_base_kaddr, causing a kernel page fault on<br \/>\nprobe failure \/ rollback:<\/p>\n<p>  BUG: unable to handle page fault &#8230; PMD 0<br \/>\n  RIP: vcn_v4_0_sw_fini+0x7b\/0x170 [amdgpu]<br \/>\n  Call Trace:<br \/>\n    amdgpu_device_fini_sw<br \/>\n    amdgpu_driver_release_kms<br \/>\n    devm_drm_dev_init_release<br \/>\n    devres_release_all<\/p>\n<p>This reverts commit d871e99879cb5fd1fa798b006b4888887e63a17a.<\/p>\n<p>(cherry picked from commit 336e0cd576817ac64a4b394ca2b3680029f3e37f)<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>Revert &#8220;drm\/amdgpu: fix aperture mapping leak&#8221;<\/p>\n<p>devres teardown is LIFO. The aperture devres node was registered after<br \/>\nthe DRM devi<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-3380","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/3380","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3380"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3380"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3380"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}