drm/amdgpu/userq: fix access to stale wptr mapping
CVE-2026-46311
Currently unrated
What is CVE-2026-46311?
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/userq: fix access to stale wptr mapping
Use drm_exec to take both locks i.e vm root bo and wptr_obj bo to access the mapping data properly.
This fixes the security issue of unmap the wptr_obj while a queue creation is in progress and passing other bo at same address.
(cherry picked from commit 1fc6c8ab45dbee096469c08c13f6099d57a52d6c)
Affected Version(s)
Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 336a9186f3a4b65bbd865d93936605ac8a1a3991
Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 6da7b1242da4455b11c24ce667d1cab1a348c8ea
Linux 0 < 7.0.9