Reference Leak in AMDGPU UserQ IOCTL Handling

Publication date: 2026-05-08

Last updated on: 2026-05-21

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: Fix reference leak in amdgpu_userq_wait_ioctl Drop reference to syncobj and timeline fence when aborting the ioctl due output array being too small. (cherry picked from commit 68951e9c3e6bb22396bc42ef2359751c8315dd27)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-08

Last Modified

2026-05-21

Generated

2026-07-09

AI Q&A

2026-05-08

EPSS Evaluated

2026-07-08

NVD

CVE-2026-43399

EUVD

EUVD-2026-28705

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.0
linux	linux_kernel	From 6.19 (inc) to 6.19.9 (exc)
linux	linux_kernel	From 6.16 (inc) to 6.18.19 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a reference leak in the Linux kernel's amdgpu driver, specifically in the drm/amdgpu/userq component. It occurs in the amdgpu_userq_wait_ioctl function, where references to sync objects and timeline fences are not properly released when aborting the ioctl due to the output array being too small.

Impact Analysis

The impact of this vulnerability is related to resource management within the Linux kernel's amdgpu driver. A reference leak can lead to increased memory usage or resource exhaustion over time, potentially causing degraded system performance or instability.

Hi! I’m here to help you understand CVE-2026-43399. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70