Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-46311

drm/amdgpu/userq: fix access to stale wptr mapping

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix access to stale wptr mapping Use drm_exec to take both locks i.e vm root bo and wptr_obj bo to access the mapping data properly. This fixes the security issue of unmap the wptr_obj while a queue creation is in progress and passing other bo at same address. (cherry picked from commit 1fc6c8ab45dbee096469c08c13f6099d57a52d6c)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5fb2f7fc21a3668e5794cc0d153641b9719713e1 to < 2da62dbb4169e758c0b1a9378b39a373bf4fb111affected
  • 5fb2f7fc21a3668e5794cc0d153641b9719713e1 to < 336a9186f3a4b65bbd865d93936605ac8a1a3991affected
  • 5fb2f7fc21a3668e5794cc0d153641b9719713e1 to < 6da7b1242da4455b11c24ce667d1cab1a348c8eaaffected

Linux Linux

Default version status: affected

  • 6.16affected
  • 0 to < 6.16unaffected
  • 6.18.57 to ≤ 6.18.*unaffected
  • 7.0.9 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References