CVE-2026-43370
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free race in VM acquire Replace non-atomic vm->process_info assignment with cmpxchg() to prevent race when parent/child processes sharing a drm_file both try…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.13%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free race in VM acquire Replace non-atomic vm->process_info assignment with cmpxchg() to prevent race when parent/child processes sharing a drm_file both try to acquire the same VM after fork(). (cherry picked from commit c7c573275ec20db05be769288a3e3bb2250ec618)
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.13% probability · 3th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-416
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/2c1030f2e84885cc58bffef6af67d5b9d2e7098fPatch
- https://git.kernel.org/stable/c/46d309996bd9251792d7dafdbaf615cf202b4447Patch
- https://git.kernel.org/stable/c/7885eb335d8f9e9942925d57e300a85e3f82ded4Patch
- https://git.kernel.org/stable/c/904025fa8bba1d028adade33346372b4ac1a9249Patch
- https://git.kernel.org/stable/c/94b7782d0c8024f5b88454241c8d4777076c3786Patch
- https://git.kernel.org/stable/c/ae87aea330c24f462fc7058ed543ba8bc6798447Patch
- https://git.kernel.org/stable/c/c658c1c85ec235b7ecfbf8dbfee385b1332088f4Patch
- https://git.kernel.org/stable/c/e61e355cbe49e585097eee28c15b862bfb1c0668Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.