CVE-2026-93139

Source
https://cve.org/CVERecord?id=CVE-2026-93139
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93139.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-93139
Downstream
Published
2026-09-17T16:11:39Z
Modified
2026-09-19T03:47:27Z
Summary
drm/amdgpu/mes: Fix hung_queue_db_array loop limit for multi-XCC
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu/mes: Fix hung_queue_db_array loop limit for multi-XCC

The loop iterated only AMDGPU_MAX_MES_PIPES times, leaving entries uninitialized for multi-XCC GPUs. This causes null pointer dereferences when accessing arrays indexed by XCC ID >= 2. Extend the loop to cover all XCCs (AMDGPU_MAX_MES_PIPES * num_xcc), matching other per-XCC arrays.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93139.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a132fc9bc2f8b394a2f75947a0e1f5c22482a94c
Fixed
7ff668cfc3960ed5b944ac35129f18a15ea08b74
Fixed
2c256086a363f01f9840a57949506eccf5c990a6

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93139.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
7.2.0
Fixed
7.2.6

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93139.json"