Riskcovery

CVE-2026-46311

drm/amdgpu/userq: fix access to stale wptr mapping

State
Published
Severity
7.8 High
Published
Jun 8, 2026
Updated
Oct 19, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/userq: fix access to stale wptr mapping

Use drm_exec to take both locks i.e vm root bo and wptr_obj bo to access the mapping data properly.

This fixes the security issue of unmap the wptr_obj while a queue creation is in progress and passing other bo at same address.

(cherry picked from commit 1fc6c8ab45dbee096469c08c13f6099d57a52d6c)

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

ProductVersions
LinuxLinux
  • 5fb2f7fc21a3668e5794cc0d153641b9719713e1 to before 2da62dbb4169e758c0b1a9378b39a373bf4fb111Affected
  • 5fb2f7fc21a3668e5794cc0d153641b9719713e1 to before 336a9186f3a4b65bbd865d93936605ac8a1a3991Affected
  • 5fb2f7fc21a3668e5794cc0d153641b9719713e1 to before 6da7b1242da4455b11c24ce667d1cab1a348c8eaAffected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.18.57 through 6.18.*Not affected
  • 7.0.9 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.