CVE-2026-52987

A flaw was found in the Linux kernel. A double free vulnerability exists in the drm/amdgpu component within the userq validate function. This issue arises because the drm_exec_fini() function is called twice on the same execution object, which is not designed to be idempotent. An attacker could potentially exploit this to cause a denial of service or lead to unpredictable system behavior.

This flaw is rated as having an Important severity because successful exploitation by an authenticated local user could cause kernel memory corruption, resulting in a system crash or potential local privilege escalation. Exposure is limited to systems equipped with AMD graphics hardware where the amdgpu driver is loaded and actively processing user-space queues. Systems lacking AMD GPU hardware or running standard headless server configurations without the driver are not exposed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.