Bug 2468261 (CVE-2026-43400) - CVE-2026-43400 kernel: drm/amdgpu: add upper bound check on user inputs in signal ioctl
Summary: CVE-2026-43400 kernel: drm/amdgpu: add upper bound check on user inputs in si...
Keywords:
Status: NEW
Alias: CVE-2026-43400
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
unspecified
unspecified
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-05-08 15:07 UTC by OSIDB Bzimport
Modified: 2026-05-08 22:06 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-05-08 15:07:34 UTC
In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: add upper bound check on user inputs in signal ioctl

Huge input values in amdgpu_userq_signal_ioctl can lead to a OOM and
could be exploited.

So check these input value against AMDGPU_USERQ_MAX_HANDLES
which is big enough value for genuine use cases and could
potentially avoid OOM.

(cherry picked from commit be267e15f99bc97cbe202cd556717797cdcf79a5)


Note You need to log in before you can comment on or make changes to this bug.