CVE-2026-68364
Last modified
CVE-2026-68364 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix ISM dc_lock deadlock during suspend [Why] System hang observed during suspend/resume while video is playing. amdgpu_dm_ism_disable() is called under dc_lock and waits for ISM delayed work via disable_delayed_work_sync(). The work handlers themselves take dc_lock, producing an ABBA deadlock when a worker is in flight at suspend time. [How] Split the disable path into two phases with opposite locking contracts: 1.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix ISM dc_lock deadlock during suspend [Why] System hang observed during suspend/resume while video is playing. amdgpu_dm_ism_disable() is called under dc_lock and waits for ISM delayed work via disable_delayed_work_sync(). The work handlers themselves take dc_lock, producing an ABBA deadlock when a worker is in flight at suspend time. [How] Split the disable path into two phases with opposite locking contracts: 1. amdgpu_dm_ism_disable() -- quiesces workers, must NOT hold dc_lock. 2. amdgpu_dm_ism_force_full_power() (new) -- drives the ISM FSM back to FULL_POWER_RUNNING, must hold dc_lock.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 95776812e6b8f908563e8994d5d947b68baf68a6; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 3714fe242592e3699ac5e2c19d68b275a210be7d; < 7.1.6 |
| Linux | Linux | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-68364?
How severe is CVE-2026-68364?
How do I fix CVE-2026-68364?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-68358In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68359In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68360In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68361In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68362In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68363In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68365In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68366In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68367In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68368In the Linux kernel, the following vulnerability has been re…
- CVE-2026-68369In the Linux kernel, the following vulnerability has been re…
- CVE-2026-6837A post-authentication command injection vulnerability in the…7.2
Are you affected by CVE-2026-68364?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
