CVE-2026-99148

A flaw was found in the Linux kernel's AMD GPU driver (amdgpu). When closing a handle to a shared graphics buffer object, the driver prematurely detaches its eviction fence before verifying whether active references remain. A local user could exploit this vulnerability to trigger the premature eviction of in-use memory while GPU user queues are still accessing it, leading to memory corruption or a Denial of Service (DoS) via a system crash.

This vulnerability is rated as Important because an unprivileged local user with direct access to rendering nodes can induce kernel memory corruption, potentially leading to privilege escalation or a denial of service via a kernel crash. Exploitation requires host or passthrough AMD graphics hardware actively driven by the amdgpu kernel module. Typical server deployments lacking AMD GPUs, or hardened environments that restrict local access to direct rendering devices, are not exposed to this risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.