CVE-2026-99119

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/userq: actually validate userq BOs

This was supposed to loop over the individual evicted list, as the kernel and always valid evicted lists were already handled in amdgpu vm validate.

Without this, BOs that were created and evicted before a userq was made would never end up in an eviction fence rearm.

Also add the missing ref to the BO before drm exec locks and refs it.

(cherry picked from commit 18decfc9e8cc0fa70b6de9944cc27a37729edfbd)