CVE-2026-43400

5.5 Moyenne

Publiée le 08/05/2026 à 17:16 · Modifiée le 17/06/2026 à 12:49 · Analysée par le NVD · Source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add upper bound check on user inputs in signal ioctl Huge input values in amdgpu_userq_signal_ioctl can lead to a OOM and could be exploited. So check these input value against AMDGPU_USERQ_MAX_HANDLES which is big enough value for genuine use cases and could potentially avoid OOM. (cherry picked from commit be267e15f99bc97cbe202cd556717797cdcf79a5)

Traduire en français

Produits concernés

Linux
Linux linux kernel

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.5 Moyenne	nvd@nist.gov (NVD)	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`

Références

https://git.kernel.org/stable/c/46630d966b99b0fc6cb01fef4110587f3375a0c0 Patch
https://git.kernel.org/stable/c/6fff5204d8aa26b1be50b6427f833bd3e8899c4f Patch
https://git.kernel.org/stable/c/ea78f8c68f4f6211c557df49174c54d167821962 Patch

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories