CVE-2026-46311 drm/amdgpu/userq: fix access to stale wptr mapping
A race condition in the AMD GPU driver allows attackers to access stale memory mappings, potentially leading to code execution or privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-46311?
CVE-2026-46311 is a high-severity vulnerability in Linux kernel, published on 8 Jun 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/userq: fix access to stale wptr mapping
Use drm_exec to take both locks i.e vm root bo and wptr_obj bo to access the mapping data properly.
This fixes the security issue of unmap the wptr_obj while a queue creation is in progress and passing other bo at same address.
(cherry picked from commit 1fc6c8ab45dbee096469c08c13f6099d57a52d6c)
Weakness: CWE-362
Which versions are affected by CVE-2026-46311?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-46311?
Apply the vendor's patch.
Is CVE-2026-46311 being exploited?
There is no known exploitation of CVE-2026-46311 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2026-46311, DEBIAN-CVE-2026-46311, GHSA-9995-3vvw-2xwp, UBUNTU-CVE-2026-46311.