Linux amdgpu userq: MQD and firmware buffer objects can be evicted, hanging the GPU node
Impact
User queues need their MQD and firmware buffer objects mapped for the lifetime of the queue, but they were not pinned, so memory pressure could evict them while hardware still held the old addresses. The result is GPU page faults and, per the commit message, a system hang. On a GPU node that means the whole host stops serving - every tenant on the box, not just the one that caused the eviction - and recovery is a reboot, which is the expensive kind of outage on an accelerator fleet. This is availability only; the record describes no memory disclosure or privilege gain and carries no CVSS score.
Who can reach it
Local user of the amdgpu user-queue interface: any tenant with a GPU device that can create user queues and then drive enough VRAM pressure to trigger eviction. No authentication beyond having the GPU.
What to do
Move to a stable kernel with the MQD/firmware BO pinning fix (two stable commits listed) and reboot the node. No vendor advisory or packaged fixed version appears in the record. Until then the only lever is keeping GPU memory pressure away from user-queue workloads, which is not a real mitigation.
References
Related entries
- Linux drm/xe: NULL dereference when freeing a devcoredump snapshot that was never populatedCVE-2026-97519 · Linux kernel drm/xe (devcoredump snapshot cleanup)Unscored
- GPU / accelerator firmware (VBIOS, GSP, NVSwitch): GPU-resident firmware sits below the host OS and is not coveredNCVD-0000-012-gpu-accelerator-firmware-vbios-g · GPU / accelerator firmware (VBIOS, GSP, NVSwitch)Unscored
- NVIDIA Multi-Instance GPU (MIG) partitioning: MIG gives each instance its own SM slice, L2 slice, memory slice andNCVD-2020-001-nvidia-multi-instance-gpu-mig-pa · NVIDIA Multi-Instance GPU (MIG) partitioningUnscored
- NVIDIA Multi-Instance GPU (MIG) partitioning: MIG gives each instance its own SM slice, L2 slice, memory slice andNCVD-2020-003-nvidia-multi-instance-gpu-mig-pa · NVIDIA Multi-Instance GPU (MIG) partitioningUnscored
- Integrated GPU graphics data compression (Intel, AMD, Apple, Arm, Qualcomm, NVIDIA): GPUs apply data-dependent losslessNCVD-2023-003-integrated-gpu-graphics-data-com · Integrated GPU graphics data compression (Intel, AMD, Apple, Arm, Qualcomm, NVIDIA)Unscored
- NVIDIA Confidential Computing (H100/H200/B100/B200/GB200) - CC-DevTools operating mode: NVIDIA GPU confidentialNCVD-2023-004-nvidia-confidential-computing-h1 · NVIDIA Confidential Computing (H100/H200/B100/B200/GB200) - CC-DevTools operating modeUnscored
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.