CVE-2026-43195
kernel: drm/amdgpu: validate user queue size constraints
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 6, 2026
Updated · November 1, 2026
Description
A flaw was found in the Linux kernel's drm/amdgpu graphics driver. This vulnerability arises from inadequate validation of user-provided queue sizes, which do not meet hardware requirements. An attacker could exploit this by supplying invalid queue size configurations, potentially leading to GPU faults or unexpected system behavior, which could result in a denial of service.
Statement
This vulnerability is rated as Moderate severity because exploitation requires local access on systems equipped with AMD GPU hardware and is confined to a denial of service. A local authenticated user with permissions to interact with Direct Rendering Manager device nodes can trigger GPU hardware faults or kernel instability by supplying invalid queue sizing parameters. Systems lacking AMD graphics hardware or headless server deployments without user access to GPU interfaces are not vulnerable to this condition.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-1284 · Improper Validation of Specified Quantity in Input