Riskcovery

CVE-2026-43398

drm/amdgpu: add upper bound check on user inputs in wait ioctl

State
Published
Severity
Not scored
Published
May 8, 2026
Updated
May 11, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: add upper bound check on user inputs in wait ioctl

Huge input values in amdgpu_userq_wait_ioctl can lead to a OOM and could be exploited.

So check these input value against AMDGPU_USERQ_MAX_HANDLES which is big enough value for genuine use cases and could potentially avoid OOM.

v2: squash in Srini's fix

(cherry picked from commit fcec012c664247531aed3e662f4280ff804d1476)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a292fdecd72834b3bec380baa5db1e69e7f70679 to before b1d10508da559da2e0ca9cca6505094a7df948e1Affected
  • a292fdecd72834b3bec380baa5db1e69e7f70679 to before 3cd93bc695b3456f26f5ed52753d9071da26202aAffected
  • a292fdecd72834b3bec380baa5db1e69e7f70679 to before 64ac7c09fc44985ec9bb6a9db740899fa40ca613Affected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.18.19 through 6.18.*Not affected
  • 6.19.9 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.