Description
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl
When amdgpu_hmm_range_alloc() fails amdgpu_gem_userptr_ioctl() returns -ENOMEM right away and skips the cleanup every other error path goes through. The GEM object, the bo->parent reference on the VM root and the MMU notifier registration are all left behind.
Use release_object here, not user_pages_done, range is still NULL at this point.
(cherry picked from commit bbe739e407a542073ec1a7872b14843566b4919e)
Metrics
No CVSS score has been published yet.
Affected software
Source: the vendor's advisory (CNA). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= e095b55155ef69a8ae0eb114a7fd2a381c012f33, < 64a6d40156ae98caafc922c6d79fe202b0acd836; >= e095b55155ef69a8ae0eb114a7fd2a381c012f33, < 3c516a5646285442e1cd71dff2584b77eb4fc421 |
| Linux | Linux | 6.19 |
References
Timeline
- Published
- Oct 28, 2026
- Last modified
- Oct 28, 2026
- NVD status
- Received