Description
In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction

mqd and fw objects are queue core objects which should remain
valid and never be unmapped and evicted for user queues to work
properly.

During eviction if these buffers are evicted the hw continue to
use the invalid addresses and caused page faults and system hung.
Published: 2026-09-24
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service causing system hangs
Action: Assess Impact
AI Analysis

Impact

Disabling eviction of the mqd and fw objects in the amdgpu driver was necessary because when these buffers were evicted the hardware continued to reference invalid memory addresses, triggering page faults that could crash the kernel and freeze the system. The flaw results from a failure in the driver to enforce that these critical queue buffers remain resident, leading to a memory corruption scenario in the kernel that manifests as a system hang. This is a deterministic crash condition, not an information disclosure or escalation, but it prevents the affected system from functioning normally.

Affected Systems

All Linux kernel builds that incorporate the AMDGPU graphics driver are potentially affected. No specific kernel versions are listed, so any kernel lacking the fix that pins the mqd and fw objects properly may experience the crash. The issue is confined to the amdgpu subsystem within the Linux kernel.

Risk and Exploitability

The CVSS score is 5.5, EPSS is less than 1%, and it is not listed in the CISA KEV catalog. Exploitation would require an actor to manipulate the GPU queue to cause eviction of the protected buffers; typical scenarios involve running privileged or malicious user‑space code that communicates with the GPU. Because the vulnerability is low probability of exploitation, the potential damage is high, but the low EPSS indicates that is unlikely. The attack vector is inferred to be local or involve privileged GPU access, not remote over the network.

Generated by OpenCVE AI on October 1, 2026 at 12:07 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade the Linux kernel to a version where the amdgpu driver patches the eviction of mqd and fw objects.
  • If a kernel update is not feasible, blacklist or unload the amdgpu module to prevent the driver from loading and exposing the flaw.
  • Monitor system logs for GPU‑related page faults or kernel panics and restrict unauthorized GPU usage to mitigate potential exploitation.

Generated by OpenCVE AI on October 1, 2026 at 12:07 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 30 Sep 2026 12:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-825
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate


Thu, 24 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction mqd and fw objects are queue core objects which should remain valid and never be unmapped and evicted for user queues to work properly. During eviction if these buffers are evicted the hw continue to use the invalid addresses and caused page faults and system hung.
Title drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-09-28T05:30:31.430Z

Reserved: 2026-09-24T16:01:01.150Z

Link: CVE-2026-97498

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-24T17:17:27.527

Modified: 2026-09-28T06:16:35.800

Link: CVE-2026-97498

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-09-24T00:00:00Z

Links: CVE-2026-97498 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-01T12:15:05Z

Weaknesses
  • CWE-825

    Expired Pointer Dereference