CVE-2026-43298
kernel: drm/amdgpu: Skip vcn poison irq release on VF
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 8, 2026
Updated · October 30, 2026
Description
A flaw was found in the amdgpu graphics driver within the Linux kernel. During deinitialization, the driver attempts to release a Video Core Next (VCN) poison interrupt request (IRQ) on a Virtual Function (VF) even when it was not enabled. This can cause a kernel warning and lead to system instability, potentially resulting in a Denial of Service (DoS).
Statement
This vulnerability is rated Low because triggering it requires local administrative access or a specific hardware deinitialization sequence on virtualized AMD GPU instances, producing only a kernel warning rather than arbitrary code execution. Under typical Red Hat Enterprise Linux deployments, the issue only manifests when tearing down or unloading the driver for SR-IOV Virtual Functions utilizing VCN 2.5 hardware. Because exploitation does not facilitate privilege escalation or remote compromise, the overall operational risk to systems is minimal.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-832 · Unlock of a Resource that is not Locked