CVE-2026-23338

A flaw was found in the Linux kernel, specifically within the drm/amdgpu/userq component. This vulnerability allows a local user to intentionally or unintentionally trigger kernel warnings. This occurs when the user provides an incorrect number of fences during a userq wait ioctl operation. While this does not compromise the kernel's integrity, it can lead to unnecessary system diagnostic messages.

This vulnerability is assessed as Moderate severity because an authenticated local user with access to direct rendering interfaces can intentionally trigger repeated kernel warning backtraces, resulting in log flooding and potential denial of service. The flaw does not facilitate memory corruption, code execution, or privilege escalation, and normal kernel execution continues with an error code. Impact is limited to environments utilizing AMD GPU hardware where untrusted users have permission to interact with the device nodes.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.