CVE-2026-80539

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the drm/amdgpu component where the amdgpu cs pass1() function fails to reject repeated chunk IDs. When a submission contains multiple AMDGPU CHUNK ID FENCE chunks, the amdgpu cs p1 user fence() function is executed multiple times. Because p->uf bo is a single-slot field, each subsequent execution overwrites the previous Buffer Object (BO) reference without releasing it. Since amdgpu cs parser fini() only releases the final reference, all preceding FENCE chunks cause a BO reference leak that persists beyond handle closure and process exit.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.