In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: add upper bound check on user inputs in wait ioctl
Huge input values in amdgpu_userq_wait_ioctl can lead to a OOM and
could be exploited.
So check these input value against AMDGPU_USERQ_MAX_HANDLES
which is big enough value for genuine use cases and could
potentially avoid OOM.
v2: squash in Srini's fix
(cherry picked from commit fcec012c664247531aed3e662f4280ff804d1476)
References
Configurations
Configuration 1 (hide)
|
History
21 May 2026, 19:29
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| References | () https://git.kernel.org/stable/c/3cd93bc695b3456f26f5ed52753d9071da26202a - Patch | |
| References | () https://git.kernel.org/stable/c/64ac7c09fc44985ec9bb6a9db740899fa40ca613 - Patch | |
| References | () https://git.kernel.org/stable/c/b1d10508da559da2e0ca9cca6505094a7df948e1 - Patch | |
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* |
|
| First Time |
Linux linux Kernel
Linux |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
08 May 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-08 15:16
Updated : 2026-05-21 19:29
NVD link : CVE-2026-43398
Mitre link : CVE-2026-43398
CVE.ORG link : CVE-2026-43398
JSON object : View
Products Affected
linux
- linux_kernel
CWE