CVE-2026-43398

Medium

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add upper bound check on user inputs in wait ioctl Huge input values in amdgpu_userq_wait_ioctl can lead to a OOM and could be exploited. So check these input value against AMDGPU_USERQ_MAX_HANDLES which is big enough value for genuine use cases and could potentially avoid OOM. v2: squash in Srini's fix (cherry picked from commit fcec012c664247531aed3e662f4280ff804d1476)

SeverityMedium
CVSS5.5
Exploit probability—
ProductLinux Kernel
PublishedMay 8, 2026
First seenMay 8, 2026

How to fix

Affected products

ProductAffected versionsFixed in
linux linux_kernel6.16 ≤ v < 6.18.19, 6.19 ≤ v < 6.19.9, 7.06.18.19, 6.19.9

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-43398 · Linux Kernel · Dark Radar