CVE-2026-99149

In the Linux kernel, the following vulnerability has been resolved: d...

CVE-2026-99149

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl When amdgpuhmmrangealloc fails amdgpugemuserptrioctl returns -ENOMEM right away and skips the cleanup every other error path goes through. The GEM object, the bo-parent...

CVE-2026-99149

The Linux kernel contains a vulnerability in the drm/amdgpu driver where amdgpu_gem_userptr_ioctl() fails to properly clean up resources during certain error conditions. Specifically, when amdgpu_hmm_range_alloc() fails, the function returns -ENOMEM immediately, causing a leak of the GEM object ,...

CVE-2026-99149 drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl When amdgpuhmmrangealloc fails amdgpugemuserptrioctl returns -ENOMEM right away and skips the cleanup every other error path goes through. The GEM object, the bo-parent...

EUVD-2026-111901

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl When amdgpuhmmrangealloc fails amdgpugemuserptrioctl returns -ENOMEM right away and skips the cleanup every other error path goes through. The GEM object, the bo-parent...

PT-2026-128142

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl When amdgpu hmm range alloc fails amdgpu gem userptr ioctl returns -ENOMEM right away and skips the cleanup every other error path goes through. The GEM object, the...

PT-2024-3460

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.28 Description A use-after-free bug has been identified in the Linux kernel, specifically in the AMDGPU DRM driver. This bug can be triggered by sending a single amdgpu gem userptr ioctl to the AMDGPU DRM...