CVE-2026-99149 drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl When amdgpuhmmrangealloc fails amdgpugemuserptrioctl returns -ENOMEM right away and skips the cleanup every other error path goes through. The GEM object, the bo-parent...

CVE-2026-99149

The Linux kernel contains a vulnerability in the drm/amdgpu driver where amdgpu_gem_userptr_ioctl() fails to properly clean up resources during certain error conditions. Specifically, when amdgpu_hmm_range_alloc() fails, the function returns -ENOMEM immediately, causing a leak of the GEM object ,...

CVE-2026-99090 drm/amdgpu: serialize vblank counter reads against GPU reset

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: serialize vblank counter reads against GPU reset The vblank counter callback reads display registers and scanout position without holding resetdomain-sem. During GPU recovery, display commit work can call the callback...