CVE-2026-68103

A flaw was found in the drm/amdgpu component of the Linux kernel. A local attacker could exploit a vulnerability where creating a user-queue with specific parameters overwrites an existing doorbell mapping. This could lead to misrouting of interrupt requests (IRQs) and incorrect cleanup processes, potentially resulting in a denial of service.

Userspace client with access to a supported AMDGPU device, on hardware/configuration using the relatively specialized User Mode Queue facility, can create conflicting user queues using the same doorbell mapping. A logic flaw in AMDGPU user queue creation allowed a new queue to reuse an already reserved doorbell BO and offset, because the existing xarray entry could be overwritten. This can misroute fence IRQ processing to the wrong queue and can let cleanup for one queue erase the mapping used by another queue. Impact is mainly local denial of service or GPU queue integrity disruption. A direct arbitrary write or confirmed privilege escalation primitive is not shown.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.