CVE Database›Document archive›CVE-2026-43298

CVE-2026-43298

kernel: drm/amdgpu: Skip vcn poison irq release on VF

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · May 8, 2026

Updated · October 30, 2026

Description

A flaw was found in the amdgpu graphics driver within the Linux kernel. During deinitialization, the driver attempts to release a Video Core Next (VCN) poison interrupt request (IRQ) on a Virtual Function (VF) even when it was not enabled. This can cause a kernel warning and lead to system instability, potentially resulting in a Denial of Service (DoS).

Statement

This vulnerability is rated Low because triggering it requires local administrative access or a specific hardware deinitialization sequence on virtualized AMD GPU instances, producing only a kernel warning rather than arbitrary code execution. Under typical Red Hat Enterprise Linux deployments, the issue only manifests when tearing down or unloading the driver for SR-IOV Virtual Functions utilizing VCN 2.5 hardware. Because exploitation does not facilitate privilege escalation or remote compromise, the overall operational risk to systems is minimal.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-832 · Unlock of a Resource that is not Locked