Riskcovery

CVE-2026-99119

drm/amdgpu/userq: actually validate userq BOs

State
Published
Severity
Not scored
Published
Oct 28, 2026
Updated
Oct 28, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/userq: actually validate userq BOs

This was supposed to loop over the individual evicted list, as the kernel and always_valid evicted lists were already handled in amdgpu_vm_validate.

Without this, BOs that were created and evicted before a userq was made would never end up in an eviction fence rearm.

Also add the missing ref to the BO before drm_exec locks and refs it.

(cherry picked from commit 18decfc9e8cc0fa70b6de9944cc27a37729edfbd)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4cdbba5a16aaf16513b69cc332b1d6f971a44b52 to before d1d6b859e89dd274cd0fae77503cdf91be8310c0Affected
  • 4cdbba5a16aaf16513b69cc332b1d6f971a44b52 to before 32d0771ef4ca69c30a1db3aefa34dd177cd2a047Affected
LinuxLinux
  • 7.2Affected
  • before 7.2Not affected
  • 7.2.13 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.