CVE-2026-23469

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

drm/imagination: Synchronize interrupts before suspending the GPU

The runtime PM suspend callback doesn't know whether the IRQ handler is

in progress on a different CPU core and doesn't wait for it to finish.

Depending on timing, the IRQ handler could be running while the GPU is

suspended, leading to kernel crashes when trying to access GPU

registers. See example signature below.

In a power off sequence initiated by the runtime PM suspend callback,

wait for any IRQ handlers in progress on other CPU cores to finish, by

calling synchronize_irq().

At the same time, remove the runtime PM resume/put calls in the threaded

IRQ handler. On top of not being the right approach to begin with, and

being at the wrong place as they should have wrapped all GPU register

accesses, the driver would hit a deadlock between synchronize_irq()

being called from a runtime PM suspend callback, holding the device

power lock, and the resume

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References