{"id":"CVE-2026-99149","kind":"vulnerability","aliases":["CVE-2026-99149"],"related":[],"title":"Linux kernel: AMD GPU userptr ioctl leaks memory objects on allocation failure","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl\n\nWhen amdgpu_hmm_range_alloc() fails amdgpu_gem_userptr_ioctl() returns\n-ENOMEM right away and skips the cleanup every other error path goes\nthrough. The GEM object, the bo->parent reference on the VM root and the\nMMU notifier registration are all left behind.\n\nUse release_object here, not user_pages_done, range is still NULL at\nthis point.\n\n(cherry picked from commit bbe739e407a542073ec1a7872b14843566b4919e)","summary":"When the AMD GPU driver's userptr ioctl runs out of memory, it returns early and skips cleanup, leaving a GEM object, a VM root reference and an MMU notifier registration behind. The practical effect is a resource leak in the kernel driver, which can degrade a system under memory pressure.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd-gpu","amdgpu","infrastructure","linux-kernel","self-hosted"],"not_affected_if":["amdgpu-not-loaded","no-amd-gpu"],"how_to_check":"- unknown","fix":"- Update to a Linux kernel release that includes upstream commit bbe739e407a542073ec1a7872b14843566b4919e (the fix is cherry-picked into stable trees; check your distribution's kernel changelog for it).","status":"open","published_at":"2026-10-28T11:17:34+00:00","first_seen_at":"2026-10-28T11:32:35+00:00","triaged_at":"2026-10-28T11:35:58+00:00","updated_at":"2026-10-28T11:35:58+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-28T11:35:58Z","model":"claude-haiku-5-5","output":{"fix":"- Update to a Linux kernel release that includes upstream commit bbe739e407a542073ec1a7872b14843566b4919e (the fix is cherry-picked into stable trees; check your distribution's kernel changelog for it).","reach":"local","title":"Linux kernel: AMD GPU userptr ioctl leaks memory objects on allocation failure","impact":"low","summary":"When the AMD GPU driver's userptr ioctl runs out of memory, it returns early and skips cleanup, leaving a GEM object, a VM root reference and an MMU notifier registration behind. The practical effect is a resource leak in the kernel driver, which can degrade a system under memory pressure.","category":"infrastructure","nicknames":[],"who_cares":["linux-kernel","amdgpu","amd-gpu","self-hosted"],"confidence":0.5,"needs_auth":"unknown","worst_case":"unknown","analyst_note":"","how_to_check":"- unknown","needs_analyst":false,"not_affected_if":["no-amd-gpu","amdgpu-not-loaded"],"who_is_affected":"Systems running a Linux kernel with the amdgpu driver loaded and the vulnerable userptr code path present, typically workstations and servers with AMD GPUs using ROCm or graphics userptr buffers. Systems without AMD GPUs or without amdgpu loaded are not affected. The sources do not say how an attacker would trigger the leak.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000612,"input_tokens":3439,"output_tokens":537,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-99149':15A,18A 'alloc':11A,105C 'amd':3A,20B,32B 'amd-gpu':19B 'amdgpu':22B,102C,107C 'away':114C 'bbe739e407a542073ec1a7872b14843566b4919e':164C 'behind':61B,144C 'bo':129C 'cherri':160C 'cleanup':47B,118C 'commit':163C 'cve':13A,16A 'degrad':75B 'done':152C 'driver':34B,72B 'drm/amdgpu':91C 'earli':44B 'effect':64B 'enomem':97C,112C 'error':121C 'everi':119C 'fail':106C 'failur':12A 'fix':92C 'follow':86C 'gem':50B,93C,108C,126C 'goe':123C 'gpu':4A,21B,33B 'hmm':103C 'host':29B 'infrastructur':23B 'ioctl':6A,37B,100C,110C 'kernel':2A,26B,71B,84C 'leak':7A,68B,95C 'leav':48B 'left':143C 'linux':1A,25B,83C 'linux-kernel':24B 'memori':8A,41B,79B 'mmu':58B,138C 'notifi':59B,139C 'null':156C 'object':9A,51B,94C,127C,147C 'page':151C 'parent':130C 'path':122C 'pick':161C 'point':159C 'practic':63B 'pressur':80B 'rang':104C,153C 'refer':55B,131C 'registr':60B,140C 'releas':146C 'resolv':90C 'resourc':67B 'return':43B,111C 'right':113C 'root':54B,135C 'run':38B 'self':28B 'self-host':27B 'skip':46B,116C 'still':155C 'system':77B 'use':145C 'user':150C 'userptr':5A,36B,99C,109C 'vm':53B,134C 'vulner':87C","nicknames":[],"mitigations":[],"who_affected":"Systems running a Linux kernel with the amdgpu driver loaded and the vulnerable userptr code path present, typically workstations and servers with AMD GPUs using ROCm or graphics userptr buffers. Systems without AMD GPUs or without amdgpu loaded are not affected. The sources do not say how an attacker would trigger the leak.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T11:17:34+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-99149","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-99149","severity":null,"published_at":"2026-10-28T11:17:34+00:00","modified_at":"2026-10-28T11:17:34+00:00","first_seen_at":"2026-10-28T11:32:35+00:00","fetched_at":"2026-10-28T11:32:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}