CVE-2026-99261None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction It fixes both the move overflow and the eviction fence add for evicting these per-vm BOs.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction
It fixes both the move overflow and the eviction fence add for evicting these per-vm BOs.
Linux >= 897ee11ec0209aa90184b5a69d0e172d007dce3a < 76acfb84973bd316c9fffbdfc631f3cfb1cfa4ccLinux >= 897ee11ec0209aa90184b5a69d0e172d007dce3a < 50b24a20be8c0d35f89f7d5c39533f69d84fe48eLinux 7.2Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99253Noneio_uring/cancel: rearm local work wake up before sleep
CVE-2026-99269High· 7.8sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQs
CVE-2026-99246High· 8.1tipc: protect node reset trace dump with node lock
CVE-2026-99270High· 8.1tcp: Fix potential UAF in reqsk_timer_handler().
CVE-2026-99260Nonentfs: fix resident conversion in ntfs_new_attr_flags
CVE-2026-99255Noneio_uring/io-wq: don't hide a link from cancellations