CVE-2026-43195: drm/amdgpu: validate user queue size constraints
drm/amdgpu: validate user queue size constraints
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.18.16 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.19.6 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.19.6-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.4-1 - Configuration
Add validation to ensure user queue sizes are powers of two and are at least AMDGPU_GPU_PAGE_SIZE.
drm/amdgpu user queue size = power of two and at least AMDGPU_GPU_PAGE_SIZE
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43195?
CVE-2026-43195 has not been assigned a CVSS score yet, but it involves a validation issue in user queue size constraints that could lead to potential denial of service.
How do I fix CVE-2026-43195?
To fix CVE-2026-43195, update to the latest version of the Linux kernel that addresses the validation of user queue size constraints.
Which versions of the Linux kernel are affected by CVE-2026-43195?
CVE-2026-43195 affects versions of the Linux kernel between 6.16 and 6.18.16, as well as versions between 6.19 and 6.19.6.
What type of vulnerability is CVE-2026-43195?
CVE-2026-43195 is classified as a validation vulnerability within the DRM component of the AMD GPU driver in the Linux kernel.
Who is the vendor for the affected software related to CVE-2026-43195?
The vendor for the affected software related to CVE-2026-43195 is The Linux Foundation, specifically concerning the Linux kernel with amdgpu DRM.