{"id":"CVE-2026-99119","kind":"vulnerability","aliases":["CVE-2026-99119"],"related":[],"title":"Linux kernel AMD GPU driver: user queue buffer validation flaw on eviction","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/userq: actually validate userq BOs\n\nThis was supposed to loop over the individual evicted list, as the\nkernel and always_valid evicted lists were already handled in\namdgpu_vm_validate.\n\nWithout this, BOs that were created and evicted before a userq was made\nwould never end up in an eviction fence rearm.\n\nAlso add the missing ref to the BO before drm_exec locks and refs it.\n\n(cherry picked from commit 18decfc9e8cc0fa70b6de9944cc27a37729edfbd)","summary":"In the Linux kernel's AMD GPU (amdgpu) user queue code, buffer objects that were evicted before a user queue was created are not properly validated, so they never get an eviction fence re-armed. The sources do not state what an attacker gains from this beyond the fix description.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd-gpu","amdgpu","infrastructure","linux-kernel"],"not_affected_if":[],"how_to_check":"- unknown","fix":"- Update to a Linux kernel release that includes upstream commit 18decfc9e8cc0fa70b6de9944cc27a37729edfbd (the fix is cherry-picked into stable branches; check the distribution's advisory for the fixed kernel version)","status":"open","published_at":"2026-10-28T11:17:31+00:00","first_seen_at":"2026-10-28T11:32:34+00:00","triaged_at":"2026-10-28T11:37:34+00:00","updated_at":"2026-10-28T11:37:34+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-10-28T11:37:34Z","model":"claude-haiku-5-5","output":{"fix":"- Update to a Linux kernel release that includes upstream commit 18decfc9e8cc0fa70b6de9944cc27a37729edfbd (the fix is cherry-picked into stable branches; check the distribution's advisory for the fixed kernel version)","reach":"local","title":"Linux kernel AMD GPU driver: user queue buffer validation flaw on eviction","impact":"medium","summary":"In the Linux kernel's AMD GPU (amdgpu) user queue code, buffer objects that were evicted before a user queue was created are not properly validated, so they never get an eviction fence re-armed. The sources do not state what an attacker gains from this beyond the fix description.","category":"infrastructure","nicknames":[],"who_cares":["linux-kernel","amdgpu","amd-gpu"],"confidence":0.4,"needs_auth":"unknown","worst_case":"unknown: the sources describe only a memory validation and fence bug","analyst_note":"Check the NVD entry and the Linux kernel stable commit 18decfc9e8cc0fa70b6de9944cc27a37729edfbd for the security impact, CVSS score, and fixed kernel versions per stable branch.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Systems running a Linux kernel with the amdgpu driver and user queues enabled, which is typical of AMD GPU hosts. The sources do not say which configurations or workloads trigger the flaw, so unknown whether systems without AMD GPUs or without user queues can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000632,"input_tokens":3415,"output_tokens":581,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-99119':15A,18A '18decfc9e8cc0fa70b6de9944cc27a37729edfbd':159C 'actual':89C 'add':141C 'alreadi':112C 'also':140C 'alway':107C 'amd':3A,20B,32B 'amd-gpu':19B 'amdgpu':22B,34B,115C 'arm':62B 'attack':70B 'beyond':74B 'bo':147C 'bos':92C,120C 'buffer':8A,38B 'cherri':155C 'code':37B 'commit':158C 'creat':48B,123C 'cve':13A,16A 'descript':77B 'driver':5A 'drm':149C 'drm/amdgpu/userq':88C 'end':133C 'evict':12A,42B,58B,101C,109C,125C,137C 'exec':150C 'fenc':59B,138C 'fix':76B 'flaw':10A 'follow':83C 'gain':71B 'get':56B 'gpu':4A,21B,33B 'handl':113C 'individu':100C 'infrastructur':23B 'kernel':2A,26B,30B,81C,105C 'linux':1A,25B,29B,80C 'linux-kernel':24B 'list':102C,110C 'lock':151C 'loop':97C 'made':130C 'miss':143C 'never':55B,132C 'object':39B 'pick':156C 'proper':51B 'queue':7A,36B,46B 're':61B 're-arm':60B 'rearm':139C 'ref':144C,153C 'resolv':87C 'sourc':64B 'state':67B 'suppos':95C 'user':6A,35B,45B 'userq':91C,128C 'valid':9A,52B,90C,108C,117C 'vm':116C 'vulner':84C 'without':118C 'would':131C","nicknames":[],"mitigations":[],"who_affected":"Systems running a Linux kernel with the amdgpu driver and user queues enabled, which is typical of AMD GPU hosts. The sources do not say which configurations or workloads trigger the flaw, so unknown whether systems without AMD GPUs or without user queues can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T11:17:31+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-99119","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-99119","severity":null,"published_at":"2026-10-28T11:17:31+00:00","modified_at":"2026-10-28T11:17:31+00:00","first_seen_at":"2026-10-28T11:32:34+00:00","fetched_at":"2026-10-28T11:32:34+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}