CVE-2026-43398

A flaw was found in the Linux kernel's amdgpu graphics driver. A local user could exploit this vulnerability by providing excessively large input values to the amdgpu_userq_wait_ioctl function. This improper input validation can lead to an Out-Of-Memory (OOM) condition, resulting in a Denial of Service (DoS) for the system.

This vulnerability is rated as a Moderate impact because exploitation is restricted to local users with access to AMD GPU device interfaces and only leads to a denial of service condition. The flaw requires specific AMD graphics hardware to be installed and active, meaning systems without AMD GPUs or running with the amdgpu driver disabled are not affected. Furthermore, this issue cannot be leveraged remotely and does not allow unauthorized access to sensitive data or privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.