CVE 7.8 HIGH

drm/amdgpu: Fix use-after-free race in VM acquire_CVE-2026-43370

7.8 / 10
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix use-after-free race in VM acquire

Replace non-atomic vm->process_info assignment with cmpxchg()
to prevent race when parent/child processes sharing a drm_file
both try to acquire the same VM after fork().

(cherry picked from commit c7c573275ec20db05be769288a3e3bb2250ec618)

Basic Information

ID CVE-2026-43370
Source Linux
Published May 8, 2026 at 14:21
Modified May 11, 2026 at 06:33

Affected Product

Vendor Linux
Product Linux
Version ede0dd86f45adf2b7083bb161f6bc81da5fe2bad
Affected Versions Linux Linux ede0dd86f45adf2b7083bb161f6bc81da5fe2bad
Linux Linux ede0dd86f45adf2b7083bb161f6bc81da5fe2bad
Linux Linux ede0dd86f45adf2b7083bb161f6bc81da5fe2bad
Linux Linux ede0dd86f45adf2b7083bb161f6bc81da5fe2bad
Linux Linux ede0dd86f45adf2b7083bb161f6bc81da5fe2bad
Linux Linux ede0dd86f45adf2b7083bb161f6bc81da5fe2bad
Linux Linux ede0dd86f45adf2b7083bb161f6bc81da5fe2bad
Linux Linux ede0dd86f45adf2b7083bb161f6bc81da5fe2bad
Linux Linux 4.17

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.