CVE-2026-43400: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add upper bound check on user inputs in signal ioctl Huge input values in amdgpu_userq_signal_ioctl can lead to a OOM and could be exploited. So check these input value against AMDGPU_USERQ_MAX_HANDLES which is big enough value for genuine use cases and could potentially avoid OOM. (cherry picked from commit be267e15f99bc97cbe202cd556717797cdcf79a5)

Засегнати продукти

• Linux Linux: a292fdecd72834b3bec380baa5db1e69e7f70679 преди 6fff5204d8aa26b1be50b6427f833bd3e8899c4f; a292fdecd72834b3bec380baa5db1e69e7f70679 преди 46630d966b99b0fc6cb01fef4110587f3375a0c0; a292fdecd72834b3bec380baa5db1e69e7f70679 преди ea78f8c68f4f6211c557df49174c54d167821962
• Linux Linux: 6.16; преди 6.16; 6.18.19 до 6.18.*; 6.19.9 до 6.19.*; от 7.0 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-43400
• https://nvd.nist.gov/vuln/detail/CVE-2026-43400
• https://git.kernel.org/stable/c/6fff5204d8aa26b1be50b6427f833bd3e8899c4f
• https://git.kernel.org/stable/c/46630d966b99b0fc6cb01fef4110587f3375a0c0
• https://git.kernel.org/stable/c/ea78f8c68f4f6211c557df49174c54d167821962