CVE-2026-99119
Received Received - Intake

BaseFortify

Publication date: 2026-10-28

Last updated on: 2026-10-28

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: actually validate userq BOs This was supposed to loop over the individual evicted list, as the kernel and always_valid evicted lists were already handled in amdgpu_vm_validate. Without this, BOs that were created and evicted before a userq was made would never end up in an eviction fence rearm. Also add the missing ref to the BO before drm_exec locks and refs it. (cherry picked from commit 18decfc9e8cc0fa70b6de9944cc27a37729edfbd)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-28
Last Modified
2026-10-28
Generated
2026-10-28
AI Q&A
2026-10-28
EPSS Evaluated
N/A
NVD
CVE-2026-99119
EUVD
EUVD-2026-112019

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
Linux Linux 4cdbba5a16aaf16513b69cc332b1d6f971a44b52
Linux Linux 4cdbba5a16aaf16513b69cc332b1d6f971a44b52
Linux Linux 7.2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves improper handling of buffer objects (BOs) in the AMDGPU driver. The issue occurs when the kernel fails to validate user queue BOs correctly during eviction. Specifically, BOs created and evicted before a user queue is established are not properly added to an eviction fence rearm, potentially leading to memory management issues.

Detection Guidance

This vulnerability is specific to the Linux kernel's AMDGPU driver and does not have a direct network detection method. Detection involves checking kernel logs for related errors or verifying the kernel version against patched releases. Use commands like 'dmesg | grep amdgpu' or 'uname -r' to inspect kernel logs and version.

Impact Analysis

This vulnerability could lead to system instability or crashes due to improper memory management in the AMDGPU driver. Users may experience graphical glitches, application failures, or system freezes, particularly when using graphics-intensive applications or workloads.

Mitigation Strategies

Update the Linux kernel to a version that includes the fix for this vulnerability. If immediate patching is not possible, consider disabling the AMDGPU driver if not required, but this may impact graphics functionality.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-99119. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart