Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43400

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add upper bound check on user inputs in signal ioctl Huge input values in amdgpu_userq_signal_ioctl can lead to a OOM and could be exploited. So check these input value against AMDGPU_USERQ_MAX_HANDLES which is big enough value for genuine use cases and could potentially avoid OOM. (cherry picked from commit be267e15f99bc97cbe202cd556717797cdcf79a5)
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:32ebec37ea28b52be66e5d23a6bc86f66ae1c975319ef30f4da39117ecffff08
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"6fff5204d8aa26b1be50b6427f833bd3e8899c4f","status":"affected","version":"a292fdecd72834b3bec380baa5db1e69e7f70679","versionType":"git"},{"lessThan":"46630d966b99b0fc6cb01fef4110587f3375a0c0","status":"affected","version":"a292fdecd72834b3bec380baa5db1e69e7f70679","versionType":"git"},{"lessThan":"ea78f8c68f4f6211c557df49174c54d167821962","status":"affected","version"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:35edb388abd5210d9136dc6d0d0fccb89423b6fd09a6d8ecab01781b103fd1c8 · sha256:e4bb391b909156ad… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.16"},{"lessThan":"6.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.19","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.9","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.0","versionType":"ori…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:35edb388abd5210d9136dc6d0d0fccb89423b6fd09a6d8ecab01781b103fd1c8 · sha256:e4bb391b909156ad… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"6fff5204d8aa26b1be50b6427f833bd3e8899c4f","status":"affected","version":"a292fdecd72834b3bec380baa5db1e69e7f70679","versionType":"git"},{"lessThan":"46630d966b99b0fc6cb01fef4110587f3375a0c0","status":"affected","version":"a292fdecd72834b3bec380baa5db1e69e7f70679","versionType":"git"},{"lessThan":"ea78f8c68f4f6211c557df49174c54d167821962","status":"affected","version"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:35edb388abd5210d9136dc6d0d0fccb89423b6fd09a6d8ecab01781b103fd1c8 · sha256:e4bb391b909156ad… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.16"},{"lessThan":"6.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.19","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.9","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.0","versionType":"ori…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:35edb388abd5210d9136dc6d0d0fccb89423b6fd09a6d8ecab01781b103fd1c8 · sha256:e4bb391b909156ad… · /containers/cna/affected/1

Source references

3 source assertions
{"url":"https://git.kernel.org/stable/c/46630d966b99b0fc6cb01fef4110587f3375a0c0"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:35edb388abd5210d9136dc6d0d0fccb89423b6fd09a6d8ecab01781b103fd1c8 · sha256:e4bb391b909156ad… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/6fff5204d8aa26b1be50b6427f833bd3e8899c4f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:35edb388abd5210d9136dc6d0d0fccb89423b6fd09a6d8ecab01781b103fd1c8 · sha256:e4bb391b909156ad… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/ea78f8c68f4f6211c557df49174c54d167821962"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:35edb388abd5210d9136dc6d0d0fccb89423b6fd09a6d8ecab01781b103fd1c8 · sha256:e4bb391b909156ad… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer