CVE-2026-23338

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-23338
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: Do not allow userspace to trivially triger kernel warnings Userspace can either deliberately pass in the too small num_fences, or the required number can legitimately grow between the two calls to the userq wait ioctl. In both cases we do not want the emit the kernel warning backtrace since nothing is wrong with the kernel and userspace will simply get an errno reported back. So lets simply drop the WARN_ONs. (cherry picked from commit 2c333ea579de6cc20ea7bc50e9595ef72863e65c)

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1753f5f81ab60a553287f9ee659a6ac363adf8d7 Patch
https://git.kernel.org/stable/c/7321302edca3a349ddaea689df95b986beee6c4a Patch
https://git.kernel.org/stable/c/7b7d7693a55d606d700beb9549c9f7f0e5d9c24f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.16:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
History

23 Apr 2026, 21:17

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.16:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: drm/amdgpu/userq: No permitir que el espacio de usuario active trivialmente advertencias del kernel El espacio de usuario puede pasar deliberadamente un num_fences demasiado pequeño, o el número requerido puede crecer legítimamente entre las dos llamadas al ioctl de espera de userq. En ambos casos no queremos emitir el rastreo de advertencia del kernel, ya que no hay ningún problema con el kernel y el espacio de usuario simplemente recibirá un errno informado. Así que simplemente descartemos los WARN_ON. (extraído del commit 2c333ea579de6cc20ea7bc50e9595ef72863e65c)
CWE NVD-CWE-noinfo
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/1753f5f81ab60a553287f9ee659a6ac363adf8d7 - () https://git.kernel.org/stable/c/1753f5f81ab60a553287f9ee659a6ac363adf8d7 - Patch
References () https://git.kernel.org/stable/c/7321302edca3a349ddaea689df95b986beee6c4a - () https://git.kernel.org/stable/c/7321302edca3a349ddaea689df95b986beee6c4a - Patch
References () https://git.kernel.org/stable/c/7b7d7693a55d606d700beb9549c9f7f0e5d9c24f - () https://git.kernel.org/stable/c/7b7d7693a55d606d700beb9549c9f7f0e5d9c24f - Patch

25 Mar 2026, 11:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-25 11:16

Updated : 2026-04-23 21:17

NVD link : CVE-2026-23338

Mitre link : CVE-2026-23338

CVE.ORG link : CVE-2026-23338

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo