CVE Database›Document archive›CVE-2026-43195

CVE-2026-43195

kernel: drm/amdgpu: validate user queue size constraints

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · May 6, 2026

Updated · November 1, 2026

Description

A flaw was found in the Linux kernel's drm/amdgpu graphics driver. This vulnerability arises from inadequate validation of user-provided queue sizes, which do not meet hardware requirements. An attacker could exploit this by supplying invalid queue size configurations, potentially leading to GPU faults or unexpected system behavior, which could result in a denial of service.

Statement

This vulnerability is rated as Moderate severity because exploitation requires local access on systems equipped with AMD GPU hardware and is confined to a denial of service. A local authenticated user with permissions to interact with Direct Rendering Manager device nodes can trigger GPU hardware faults or kernel instability by supplying invalid queue sizing parameters. Systems lacking AMD graphics hardware or headless server deployments without user access to GPU interfaces are not vulnerable to this condition.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-1284 · Improper Validation of Specified Quantity in Input