CVE-2026-72095

A flaw was found in the Linux kernel's dma-fence component. The dma_fence_dedup_array() function incorrectly handles zero-count input, leading to a memory corruption vulnerability. A local attacker could potentially exploit this by triggering specific conditions in the amdgpu_userq_wait_*() functions, which may cause a system crash or lead to further compromise.

This vulnerability is evaluated as having Moderate severity because exploitation is restricted to local authenticated users with access to modern GPU subsystems and primarily results in a system crash rather than remote compromise. In typical Red Hat environments, triggering the underlying dereference requires interaction with AMD GPU user queue interfaces, limiting the attack surface to systems equipped with matching graphics hardware. Furthermore, earlier platforms such as Red Hat Enterprise Linux 8 are not affected because the vulnerable code path is not present.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.