CVE-2026-31766 is a vulnerability in the Linux kernel's AMDGPU driver where the doorbell_offset parameter in user queue creation is not properly validated. This can lead to an out-of-bounds doorbell index calculation, potentially corrupting kernel doorbell space. The issue has been fixed by adding validation to ensure doorbell_offset falls within the allocated doorbell buffer object (BO), preventing overflow and out-of-bounds access.