Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2026/05/08 10:5 p.m.4 views

CVE-2026-43398

A flaw was found in the Linux kernel's amdgpu graphics driver. A local user could exploit this vulnerability by providing excessively large input values to the amdgpuuserqwaitioctl function. This improper input validation can lead to an Out-Of-Memory OOM condition, resulting in a Denial of Servic...

5.5CVSS5.8AI score0.00013EPSS
Exploits0References4
NVD
NVD
added 2026/05/08 3:16 p.m.5 views

CVE-2026-43398

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add upper bound check on user inputs in wait ioctl Huge input values in amdgpuuserqwaitioctl can lead to a OOM and could be exploited. So check these input value against AMDGPUUSERQMAXHANDLES which is big enough value...

5.5CVSS0.00013EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2026/05/08 3:16 p.m.2 views

CVE-2026-43398

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add upper bound check on user inputs in wait ioctl Huge input values in amdgpuuserqwaitioctl can lead to a OOM and could be exploited. So check these input value against AMDGPUUSERQMAXHANDLES which is big enough value...

5.5CVSS5.7AI score0.00013EPSS
Exploits0References5
OSV
OSV
added 2026/05/08 3:16 p.m.4 views

UBUNTU-CVE-2026-43398

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add upper bound check on user inputs in wait ioctl Huge input values in amdgpuuserqwaitioctl can lead to a OOM and could be exploited. So check these input value against AMDGPUUSERQMAXHANDLES which is big enough value...

5.5CVSS5.7AI score0.00013EPSS
Exploits0References6
CVE
CVE
added 2026/05/08 2:21 p.m.5 views

CVE-2026-43399

CVE-2026-43399 affects the Linux kernel amdgpu driver: a reference leak in amdgpu_userq_wait_ioctl occurs when an ioctl is aborted because the output array is too small. The fix drops references to syncobj and timeline fence during abort, and is cherry-picked from commit 68951e9c3e6bb22396bc42ef2...

5.5CVSS5.8AI score0.00013EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2026/05/08 2:21 p.m.6 views

CVE-2026-43399

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: Fix reference leak in amdgpuuserqwaitioctl Drop reference to syncobj and timeline fence when aborting the ioctl due output array being too small. cherry picked from commit 68951e9c3e6bb22396bc42ef2359751c8315dd2...

5.5CVSS5.7AI score0.00013EPSS
Exploits0
ATTACKERKB
ATTACKERKB
added 2026/05/08 2:21 p.m.3 views

CVE-2026-43398

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add upper bound check on user inputs in wait ioctl Huge input values in amdgpuuserqwaitioctl can lead to a OOM and could be exploited. So check these input value against AMDGPUUSERQMAXHANDLES which is big enough value...

5.8AI score0.00013EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2026/05/08 2:21 p.m.24 views

CVE-2026-43398 drm/amdgpu: add upper bound check on user inputs in wait ioctl

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add upper bound check on user inputs in wait ioctl Huge input values in amdgpuuserqwaitioctl can lead to a OOM and could be exploited. So check these input value against AMDGPUUSERQMAXHANDLES which is big enough value...

0.00013EPSS
Exploits0References3
CVE
CVE
added 2026/05/08 2:21 p.m.6 views

CVE-2026-43398

The CVE-2026-43398 entry concerns the Linux kernel amdgpu driver. A vulnerability arises from improper input validation in the userq_wait ioctl (amdgpu_userq_wait_ioctl), where excessively large input values can cause an Out-Of-Memory (OOM) situation, leading to Denial of Service. The root cause ...

5.5CVSS5.8AI score0.00013EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/05/08 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-43398

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: add upper bound check on user inputs in wait ioctl Huge input values in amdgpuuserqwaitioctl can lead to a OOM and could be exploited. So check thes...

5.5CVSS5.8AI score0.00013EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/08 12:0 a.m.4 views

PT-2026-39059

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component where the amdgpu userq wait ioctl function lacks an upper bound check on user inputs. Providing excessively large input values can lead to an...

5.8AI score0.00013EPSS
Exploits0References8
CNNVD
CNNVD
added 2026/05/08 12:0 a.m.2 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of upper-bound checks on user input in the amdgpuuserqwaitioctl function. This...

5.5CVSS5.8AI score0.00013EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/03/25 2:39 p.m.1 views

CVE-2026-23338

A flaw was found in the Linux kernel, specifically within the drm/amdgpu/userq component. This vulnerability allows a local user to intentionally or unintentionally trigger kernel warnings. This occurs when the user provides an incorrect number of fences during a userq wait ioctl operation. While...

5.8AI score0.00017EPSS
Exploits0References4
CVE
CVE
added 2026/03/25 10:27 a.m.3 views

CVE-2026-23338

The CVE-2026-23338 issue affects the Linux kernel component drm/amdgpu/userq. Userspace can trigger kernel warnings by providing an incorrect or growing number of fences across a userq wait ioctl, causing a backtrace to be emitted. The fix removes WARN_ONs so that, when the kernel detects nothing...

5.5CVSS5.7AI score0.00017EPSS
Exploits0References3Affected Software1
SUSE CVE
SUSE CVE
added 2024/04/04 2:17 a.m.0 views

SUSE CVE-2024-26657

In the Linux kernel, the following vulnerability has been resolved: drm/sched: fix null-ptr-deref in init entity The bug can be triggered by sending an amdgpucswaitioctl to the AMDGPU DRM driver on any ASICs with valid context. The bug was reported by Joonkyo Jung . For example the following code...

5.5CVSS6.5AI score0.0001EPSS
Exploits0References8
Rows per page
Query Builder