CVE-2026-43370

A flaw was found in the Linux kernel's AMD GPU (amdgpu) driver. This vulnerability involves a timing issue, known as a race condition, during the process of acquiring a Virtual Machine (VM). When multiple processes attempt to access the same VM simultaneously, a local attacker could exploit this flaw. Successful exploitation could lead to an escalation of privileges, allowing unauthorized access or control, or cause the system to become unstable and crash (denial of service).

This vulnerability is rated as Moderate impact because successful exploitation requires local user privileges, specific AMD graphics hardware, and precise race condition timing between forked processes. In standard Red Hat Enterprise Linux deployments, the affected amdgpu kernel module is only loaded on systems utilizing supported AMD graphics adapters. Furthermore, the issue cannot be triggered remotely over the network, confining the potential risk to local denial of service or privilege escalation on systems running concurrent GPU workloads.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.