CVE-2026-23338: drm/amdgpu/userq: Do not allow userspace to trivially triger kernel warnings
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/userq: Do not allow userspace to trivially triger kernel warnings
Userspace can either deliberately pass in the too small numfences, or the required number can legitimately grow between the two calls to the userq wait ioctl. In both cases we do not want the emit the kernel warning backtrace since nothing is wrong with the kernel and userspace will simply get an errno reported back. So lets simply drop the WARNONs.
(cherry picked from commit 2c333ea579de6cc20ea7bc50e9595ef72863e65c)
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23338?
CVE-2026-23338 has a medium severity rating of 5.5 on the CVSS scale.
How do I fix CVE-2026-23338?
To fix CVE-2026-23338, apply the available patches released for the Linux kernel.
What type of system is affected by CVE-2026-23338?
CVE-2026-23338 affects the Linux kernel, specifically the amdgpu driver in Linux systems.
What are the potential impacts of CVE-2026-23338?
CVE-2026-23338 could allow userspace to trigger kernel warnings, potentially affecting system stability.
When was CVE-2026-23338 published?
CVE-2026-23338 was published on March 25, 2026.