---
id: CVE-2026-43444
title: 'drm/amdkfd: Unreserve bo if queue update failed'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/amdkfd: Unreserve bo if queue update failed

  Error handling path should unreserve bo then return failed.

  (cherry picked from commit c24afed7de9ecce341825d8ab55a43a…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 305cd109b761202d71f2f655ea369fe889ba1d01 <
    781110700ada22168fbb490dd61432d23a17a5b4
  - >-
    Linux >= 305cd109b761202d71f2f655ea369fe889ba1d01 <
    529c985da1b277b36dc99aad660f96dc70f3c467
  - >-
    Linux >= 305cd109b761202d71f2f655ea369fe889ba1d01 <
    b2b7742c465c8e3b36dc325a48abb4b9f2aaa38b
  - >-
    Linux >= 305cd109b761202d71f2f655ea369fe889ba1d01 <
    2ce75a0b7e1bfddbcb9bc8aeb2e5e7fa99971acf
  - Linux 6.12
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T15:38:56.358756Z'
published: '2026-05-08'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T15:42:54.546Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-43444'
references:
  - url: 'https://git.kernel.org/stable/c/781110700ada22168fbb490dd61432d23a17a5b4'
  - url: 'https://git.kernel.org/stable/c/529c985da1b277b36dc99aad660f96dc70f3c467'
  - url: 'https://git.kernel.org/stable/c/b2b7742c465c8e3b36dc325a48abb4b9f2aaa38b'
  - url: 'https://git.kernel.org/stable/c/2ce75a0b7e1bfddbcb9bc8aeb2e5e7fa99971acf'
tags:
  - cve.org
epss: 0.00122
epssPercentile: 0.01994
ingestedAt: '2026-11-06T15:54:03.909Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Unreserve bo if queue update failed

Error handling path should unreserve bo then return failed.

(cherry picked from commit c24afed7de9ecce341825d8ab55a43a254348b33)

## Affected

- `Linux >= 305cd109b761202d71f2f655ea369fe889ba1d01 < 781110700ada22168fbb490dd61432d23a17a5b4`
- `Linux >= 305cd109b761202d71f2f655ea369fe889ba1d01 < 529c985da1b277b36dc99aad660f96dc70f3c467`
- `Linux >= 305cd109b761202d71f2f655ea369fe889ba1d01 < b2b7742c465c8e3b36dc325a48abb4b9f2aaa38b`
- `Linux >= 305cd109b761202d71f2f655ea369fe889ba1d01 < 2ce75a0b7e1bfddbcb9bc8aeb2e5e7fa99971acf`
- `Linux 6.12`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.