CVE-2026-43370

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-43370
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free race in VM acquire Replace non-atomic vm->process_info assignment with cmpxchg() to prevent race when parent/child processes sharing a drm_file both try to acquire the same VM after fork(). (cherry picked from commit c7c573275ec20db05be769288a3e3bb2250ec618)

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2c1030f2e84885cc58bffef6af67d5b9d2e7098f Patch
https://git.kernel.org/stable/c/46d309996bd9251792d7dafdbaf615cf202b4447 Patch
https://git.kernel.org/stable/c/7885eb335d8f9e9942925d57e300a85e3f82ded4 Patch
https://git.kernel.org/stable/c/904025fa8bba1d028adade33346372b4ac1a9249 Patch
https://git.kernel.org/stable/c/94b7782d0c8024f5b88454241c8d4777076c3786 Patch
https://git.kernel.org/stable/c/ae87aea330c24f462fc7058ed543ba8bc6798447 Patch
https://git.kernel.org/stable/c/c658c1c85ec235b7ecfbf8dbfee385b1332088f4 Patch
https://git.kernel.org/stable/c/e61e355cbe49e585097eee28c15b862bfb1c0668 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
History

15 May 2026, 15:18

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/2c1030f2e84885cc58bffef6af67d5b9d2e7098f - () https://git.kernel.org/stable/c/2c1030f2e84885cc58bffef6af67d5b9d2e7098f - Patch
References () https://git.kernel.org/stable/c/46d309996bd9251792d7dafdbaf615cf202b4447 - () https://git.kernel.org/stable/c/46d309996bd9251792d7dafdbaf615cf202b4447 - Patch
References () https://git.kernel.org/stable/c/7885eb335d8f9e9942925d57e300a85e3f82ded4 - () https://git.kernel.org/stable/c/7885eb335d8f9e9942925d57e300a85e3f82ded4 - Patch
References () https://git.kernel.org/stable/c/904025fa8bba1d028adade33346372b4ac1a9249 - () https://git.kernel.org/stable/c/904025fa8bba1d028adade33346372b4ac1a9249 - Patch
References () https://git.kernel.org/stable/c/94b7782d0c8024f5b88454241c8d4777076c3786 - () https://git.kernel.org/stable/c/94b7782d0c8024f5b88454241c8d4777076c3786 - Patch
References () https://git.kernel.org/stable/c/ae87aea330c24f462fc7058ed543ba8bc6798447 - () https://git.kernel.org/stable/c/ae87aea330c24f462fc7058ed543ba8bc6798447 - Patch
References () https://git.kernel.org/stable/c/c658c1c85ec235b7ecfbf8dbfee385b1332088f4 - () https://git.kernel.org/stable/c/c658c1c85ec235b7ecfbf8dbfee385b1332088f4 - Patch
References () https://git.kernel.org/stable/c/e61e355cbe49e585097eee28c15b862bfb1c0668 - () https://git.kernel.org/stable/c/e61e355cbe49e585097eee28c15b862bfb1c0668 - Patch
First Time Linux linux Kernel
Linux
CWE CWE-416
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*

11 May 2026, 08:16

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

08 May 2026, 15:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-08 15:16

Updated : 2026-05-15 15:18

NVD link : CVE-2026-43370

Mitre link : CVE-2026-43370

CVE.ORG link : CVE-2026-43370

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-416

Use After Free