Riskcovery

CVE-2026-43400

drm/amdgpu: add upper bound check on user inputs in signal ioctl

State
Published
Severity
Not scored
Published
May 8, 2026
Updated
May 11, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: add upper bound check on user inputs in signal ioctl

Huge input values in amdgpu_userq_signal_ioctl can lead to a OOM and could be exploited.

So check these input value against AMDGPU_USERQ_MAX_HANDLES which is big enough value for genuine use cases and could potentially avoid OOM.

(cherry picked from commit be267e15f99bc97cbe202cd556717797cdcf79a5)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a292fdecd72834b3bec380baa5db1e69e7f70679 to before 6fff5204d8aa26b1be50b6427f833bd3e8899c4fAffected
  • a292fdecd72834b3bec380baa5db1e69e7f70679 to before 46630d966b99b0fc6cb01fef4110587f3375a0c0Affected
  • a292fdecd72834b3bec380baa5db1e69e7f70679 to before ea78f8c68f4f6211c557df49174c54d167821962Affected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.18.19 through 6.18.*Not affected
  • 6.19.9 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.