Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-43398

drm/amdgpu: add upper bound check on user inputs in wait ioctl

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add upper bound check on user inputs in wait ioctl Huge input values in amdgpu_userq_wait_ioctl can lead to a OOM and could be exploited. So check these input value against AMDGPU_USERQ_MAX_HANDLES which is big enough value for genuine use cases and could potentially avoid OOM. v2: squash in Srini's fix (cherry picked from commit fcec012c664247531aed3e662f4280ff804d1476)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a292fdecd72834b3bec380baa5db1e69e7f70679 to < b1d10508da559da2e0ca9cca6505094a7df948e1affected
  • a292fdecd72834b3bec380baa5db1e69e7f70679 to < 3cd93bc695b3456f26f5ed52753d9071da26202aaffected
  • a292fdecd72834b3bec380baa5db1e69e7f70679 to < 64ac7c09fc44985ec9bb6a9db740899fa40ca613affected

Linux Linux

Default version status: affected

  • 6.16affected
  • 0 to < 6.16unaffected
  • 6.18.19 to ≤ 6.18.*unaffected
  • 6.19.9 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References