CVE-2026-99148

The Linux kernel 's amdgpu driver contains a vulnerability where amdgpu_gem_object_close() prematurely detaches the user queue eviction fence from a Buffer Object (BO) before verifying the bo_va->ref_count . This allows a BO to be evicted while other handles or mappings are still in use, poten...