CVE-2026-99119
Linux: drm/amdgpu/userq: actually validate userq BOs
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
What fixes it
- 32d0771ef4ca69c30a1db3aefa34dd177cd2a047LinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/userq: actually validate userq BOs
This was supposed to loop over the individual evicted list, as the kernel and always_valid evicted lists were already handled in amdgpu_vm_validate.
Without this, BOs that were created and evicted before a userq was made would never end up in an eviction fence rearm.
Also add the missing ref to the BO before drm_exec locks and refs it.
(cherry picked from commit 18decfc9e8cc0fa70b6de9944cc27a37729edfbd)
Text from CVE List
Affected versions 6
- Linuxaffected: 4cdbba5a16aaf16513b69cc332b1d6f971a44b52 before d1d6b859e89dd274cd0fae77503cdf91be8310c0CVE List
- Linuxaffected: 4cdbba5a16aaf16513b69cc332b1d6f971a44b52 before 32d0771ef4ca69c30a1db3aefa34dd177cd2a047CVE List
- Linuxaffected: 7.2CVE List
- Linuxunaffected: all versions before 7.2CVE List
- Linuxunaffected: 7.2.13 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List