EUVD-2026-38855

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid double drmexecfini in userq validate When newaddition is true, amdgpuuserqvmvalidate calls drmexecfini&exec before iterating over the collected HMM ranges and calling amdgputtmttgetuserpages. If...

CVE-2025-40334

Summary: CVE-2025-40334 concerns the Linux kernel subsystem for AMD GPUs (drm/amdgpu). The issue is that the code path validating the userq object’s virtual address and size could permit operating on a user/qr virtual address that is not guaranteed to be resident in a valid VM mapping. The connec...

CVE-2025-40335

CVE-2025-40335 concerns the Linux kernel component drm/amdgpu. The connected sources state that the vulnerability was resolved by adding validation for userq input arguments and by rejecting invalid userq requests at the IOCTL handling stage. In other words, the affected code path involving userq...