amdgpu_userq_wait_ioctl Heap Buffer Overflow DoS

The vulnerability of the amdgpuuserqwaitioctl function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserqfence.c driver of the Direct Rendering Infrastructure DRI for AMD GPU cores in the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow ...

CVE-2026-43399: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: Fix reference leak in amdgpuuserqwaitioctl Drop reference to syncobj and timeline fence when aborting the ioctl due output array being too small. cherry picked from commit 68951e9c3e6bb22396bc42ef2359751c8315dd2...

CVE-2026-43398: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add upper bound check on user inputs in wait ioctl Huge input values in amdgpuuserqwaitioctl can lead to a OOM and could be exploited. So check these input value against AMDGPUUSERQMAXHANDLES which is big enough value...