Riskcovery

CVE-2026-23338

drm/amdgpu/userq: Do not allow userspace to trivially triger kernel warnings

State
Published
Severity
Not scored
Published
Mar 25, 2026
Updated
May 11, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/userq: Do not allow userspace to trivially triger kernel warnings

Userspace can either deliberately pass in the too small num_fences, or the required number can legitimately grow between the two calls to the userq wait ioctl. In both cases we do not want the emit the kernel warning backtrace since nothing is wrong with the kernel and userspace will simply get an errno reported back. So lets simply drop the WARN_ONs.

(cherry picked from commit 2c333ea579de6cc20ea7bc50e9595ef72863e65c)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a292fdecd72834b3bec380baa5db1e69e7f70679 to before 1753f5f81ab60a553287f9ee659a6ac363adf8d7Affected
  • a292fdecd72834b3bec380baa5db1e69e7f70679 to before 7321302edca3a349ddaea689df95b986beee6c4aAffected
  • a292fdecd72834b3bec380baa5db1e69e7f70679 to before 7b7d7693a55d606d700beb9549c9f7f0e5d9c24fAffected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.18.17 through 6.18.*Not affected
  • 6.19.7 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.