{"schema":"threatline.record/2","record":{"id":"CVE-2026-97498","aliases":[],"summary":"drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/userq: pin mqd and fw object bo to avoid eviction\n\nmqd and fw objects are queue core objects which should remain\nvalid and never be unmapped and evicted for user queues to work\nproperly.\n\nDuring eviction if these buffers are evicted the hw continue to\nuse the invalid addresses and caused page faults and system hung.","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97498","source_modified_at":"2026-09-28T05:30:31.430Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Linux","vendor":"Linux","versions":[{"version":"0385800c2ff7bddf16a9caad5840f4e4823253f2","lessThan":"a16d9986b7b27b08a696524a4dbf03dbf5433a16","status":"affected","versionType":"git"},{"version":"0385800c2ff7bddf16a9caad5840f4e4823253f2","lessThan":"a3bbf32a336939a1d21b9561f8e53333b684b7ef","status":"affected","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97498","source_modified_at":"2026-09-28T05:30:31.430Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Linux","vendor":"Linux","versions":[{"version":"6.16","status":"affected"},{"version":"0","lessThan":"6.16","status":"unaffected","versionType":"semver"},{"version":"6.18.53","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":0.00155,"percentile":0.04342,"score_date":"2026-10-23"},"published_at":"2026-09-24T16:04:45.339Z","modified_at":"2026-09-28T05:30:31.430Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-97498","fetched_at":"2026-10-23T18:52:38.922436Z","source_modified_at":"2026-09-28T05:30:31.430Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-97498","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/a16d9986b7b27b08a696524a4dbf03dbf5433a16"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/a3bbf32a336939a1d21b9561f8e53333b684b7ef"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-09-28T05:30:31.430Z","content_hash":"2e674d312cd4f4939519b5964a21ab5a216ead98d7e21a79dd70670dc0ac4fb7"}}