GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-43370 (GCVE-0-2026-43370)

Vulnerability from cvelistv5 – Published: 2026-05-08 14:21 – Updated: 2026-08-05 12:27
VLAI
Title
drm/amdgpu: Fix use-after-free race in VM acquire
Summary
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free race in VM acquire Replace non-atomic vm->process_info assignment with cmpxchg() to prevent race when parent/child processes sharing a drm_file both try to acquire the same VM after fork(). (cherry picked from commit c7c573275ec20db05be769288a3e3bb2250ec618)
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: ede0dd86f45adf2b7083bb161f6bc81da5fe2bad , < ae87aea330c24f462fc7058ed543ba8bc6798447 (git)
Affected: ede0dd86f45adf2b7083bb161f6bc81da5fe2bad , < 46d309996bd9251792d7dafdbaf615cf202b4447 (git)
Affected: ede0dd86f45adf2b7083bb161f6bc81da5fe2bad , < e61e355cbe49e585097eee28c15b862bfb1c0668 (git)
Affected: ede0dd86f45adf2b7083bb161f6bc81da5fe2bad , < c658c1c85ec235b7ecfbf8dbfee385b1332088f4 (git)
Affected: ede0dd86f45adf2b7083bb161f6bc81da5fe2bad , < 904025fa8bba1d028adade33346372b4ac1a9249 (git)
Affected: ede0dd86f45adf2b7083bb161f6bc81da5fe2bad , < 7885eb335d8f9e9942925d57e300a85e3f82ded4 (git)
Affected: ede0dd86f45adf2b7083bb161f6bc81da5fe2bad , < 94b7782d0c8024f5b88454241c8d4777076c3786 (git)
Affected: ede0dd86f45adf2b7083bb161f6bc81da5fe2bad , < 2c1030f2e84885cc58bffef6af67d5b9d2e7098f (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.17
Unaffected: 0 , < 4.17 (semver)
Unaffected: 5.10.253 , ≤ 5.10.* (semver)
Unaffected: 5.15.203 , ≤ 5.15.* (semver)
Unaffected: 6.1.167 , ≤ 6.1.* (semver)
Unaffected: 6.6.130 , ≤ 6.6.* (semver)
Unaffected: 6.12.78 , ≤ 6.12.* (semver)
Unaffected: 6.18.19 , ≤ 6.18.* (semver)
Unaffected: 6.19.9 , ≤ 6.19.* (semver)
Unaffected: 7.0 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ae87aea330c24f462fc7058ed543ba8bc6798447",
              "status": "affected",
              "version": "ede0dd86f45adf2b7083bb161f6bc81da5fe2bad",
              "versionType": "git"
            },
            {
              "lessThan": "46d309996bd9251792d7dafdbaf615cf202b4447",
              "status": "affected",
              "version": "ede0dd86f45adf2b7083bb161f6bc81da5fe2bad",
              "versionType": "git"
            },
            {
              "lessThan": "e61e355cbe49e585097eee28c15b862bfb1c0668",
              "status": "affected",
              "version": "ede0dd86f45adf2b7083bb161f6bc81da5fe2bad",
              "versionType": "git"
            },
            {
              "lessThan": "c658c1c85ec235b7ecfbf8dbfee385b1332088f4",
              "status": "affected",
              "version": "ede0dd86f45adf2b7083bb161f6bc81da5fe2bad",
              "versionType": "git"
            },
            {
              "lessThan": "904025fa8bba1d028adade33346372b4ac1a9249",
              "status": "affected",
              "version": "ede0dd86f45adf2b7083bb161f6bc81da5fe2bad",
              "versionType": "git"
            },
            {
              "lessThan": "7885eb335d8f9e9942925d57e300a85e3f82ded4",
              "status": "affected",
              "version": "ede0dd86f45adf2b7083bb161f6bc81da5fe2bad",
              "versionType": "git"
            },
            {
              "lessThan": "94b7782d0c8024f5b88454241c8d4777076c3786",
              "status": "affected",
              "version": "ede0dd86f45adf2b7083bb161f6bc81da5fe2bad",
              "versionType": "git"
            },
            {
              "lessThan": "2c1030f2e84885cc58bffef6af67d5b9d2e7098f",
              "status": "affected",
              "version": "ede0dd86f45adf2b7083bb161f6bc81da5fe2bad",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.17"
            },
            {
              "lessThan": "4.17",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.253",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.203",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.167",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.130",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.78",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.19",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.253",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.203",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.167",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.130",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.78",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.19",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.9",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Fix use-after-free race in VM acquire\n\nReplace non-atomic vm-\u003eprocess_info assignment with cmpxchg()\nto prevent race when parent/child processes sharing a drm_file\nboth try to acquire the same VM after fork().\n\n(cherry picked from commit c7c573275ec20db05be769288a3e3bb2250ec618)"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable path is reached through local AMD KFD/amdgpu device ioctls, especially acquiring an amdgpu render-node VM through /dev/kfd. No network or physical-device packet path reaches this code.\nAC:L - The race is between attacker-controlled processes sharing the same drm_file after fork and issuing concurrent VM-acquire operations. Because the attacker controls both sides of the race, this is low complexity.\nPR:L - An unprivileged local user with access to /dev/kfd and the amdgpu render node can issue the relevant ioctls; no real root or init-namespace capability check is required. This is basic local user access rather than administrative privilege.\nUI:N - Exploitation does not require a victim user action after the attacker has local execution and device access. The attacker can open the device files, fork, and invoke the ioctls directly.\nS:U - The bug corrupts kernel driver state within the same kernel security authority. It is a standard local kernel memory-corruption/privilege-escalation scenario, not a VM escape or other scope change.\nC:H - The non-atomic VM ownership assignment can leave stale amdkfd_process_info references and cause a kernel use-after-free. Following kernel UAF scoring guidance, this can be leveraged for high-impact information disclosure.\nI:H - The freed process_info object contains list, mutex, fence, and process state used later by KFD/GPUVM paths, making this kernel memory corruption. A defensible worst case is arbitrary kernel memory modification or control-flow influence.\nA:H - Even without full exploitation, the UAF and associated list/lifetime corruption can crash or hang the kernel. Kernel oops/panic-level denial of service is high availability impact."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:27:32.528Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ae87aea330c24f462fc7058ed543ba8bc6798447"
        },
        {
          "url": "https://git.kernel.org/stable/c/46d309996bd9251792d7dafdbaf615cf202b4447"
        },
        {
          "url": "https://git.kernel.org/stable/c/e61e355cbe49e585097eee28c15b862bfb1c0668"
        },
        {
          "url": "https://git.kernel.org/stable/c/c658c1c85ec235b7ecfbf8dbfee385b1332088f4"
        },
        {
          "url": "https://git.kernel.org/stable/c/904025fa8bba1d028adade33346372b4ac1a9249"
        },
        {
          "url": "https://git.kernel.org/stable/c/7885eb335d8f9e9942925d57e300a85e3f82ded4"
        },
        {
          "url": "https://git.kernel.org/stable/c/94b7782d0c8024f5b88454241c8d4777076c3786"
        },
        {
          "url": "https://git.kernel.org/stable/c/2c1030f2e84885cc58bffef6af67d5b9d2e7098f"
        }
      ],
      "title": "drm/amdgpu: Fix use-after-free race in VM acquire",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-43370",
    "datePublished": "2026-05-08T14:21:21.926Z",
    "dateReserved": "2026-05-01T14:12:56.006Z",
    "dateUpdated": "2026-08-05T12:27:32.528Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-43370",
      "date": "2026-09-16",
      "epss": "0.00126",
      "percentile": "0.02639"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-43370\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-05-08T15:16:48.067\",\"lastModified\":\"2026-06-17T10:49:28.273\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ndrm/amdgpu: Fix use-after-free race in VM acquire\\n\\nReplace non-atomic vm-\u003eprocess_info assignment with cmpxchg()\\nto prevent race when parent/child processes sharing a drm_file\\nboth try to acquire the same VM after fork().\\n\\n(cherry picked from commit c7c573275ec20db05be769288a3e3bb2250ec618)\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"ede0dd86f45adf2b7083bb161f6bc81da5fe2bad\",\"lessThan\":\"ae87aea330c24f462fc7058ed543ba8bc6798447\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ede0dd86f45adf2b7083bb161f6bc81da5fe2bad\",\"lessThan\":\"46d309996bd9251792d7dafdbaf615cf202b4447\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ede0dd86f45adf2b7083bb161f6bc81da5fe2bad\",\"lessThan\":\"e61e355cbe49e585097eee28c15b862bfb1c0668\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ede0dd86f45adf2b7083bb161f6bc81da5fe2bad\",\"lessThan\":\"c658c1c85ec235b7ecfbf8dbfee385b1332088f4\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ede0dd86f45adf2b7083bb161f6bc81da5fe2bad\",\"lessThan\":\"904025fa8bba1d028adade33346372b4ac1a9249\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ede0dd86f45adf2b7083bb161f6bc81da5fe2bad\",\"lessThan\":\"7885eb335d8f9e9942925d57e300a85e3f82ded4\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ede0dd86f45adf2b7083bb161f6bc81da5fe2bad\",\"lessThan\":\"94b7782d0c8024f5b88454241c8d4777076c3786\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ede0dd86f45adf2b7083bb161f6bc81da5fe2bad\",\"lessThan\":\"2c1030f2e84885cc58bffef6af67d5b9d2e7098f\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.17\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.17\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.253\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.203\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.167\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.130\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.78\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.19\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.19.9\",\"lessThanOrEqual\":\"6.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.17\",\"versionEndExcluding\":\"5.10.253\",\"matchCriteriaId\":\"DEE6D861-833E-4A69-98AC-2743228E5BAF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.203\",\"matchCriteriaId\":\"20DDB3E9-AABF-4107-ADB0-5362AA067045\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.167\",\"matchCriteriaId\":\"2EDC6BAF-B710-4E26-B6AA-D68922EE7B43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.130\",\"matchCriteriaId\":\"C57BB918-DF28-46B3-94F7-144176841267\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.78\",\"matchCriteriaId\":\"28D591F5-B196-4CC9-905C-DC80F116E7A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.19\",\"matchCriteriaId\":\"D394AC60-6F28-435F-872A-CCDF384B8331\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.19\",\"versionEndExcluding\":\"6.19.9\",\"matchCriteriaId\":\"E825E7C3-FEAC-4FD3-8A81-78D7387948C9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"F253B622-8837-4245-BCE5-A7BF8FC76A16\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AE85AD8-4641-4E7C-A2F4-305E2CD9EE64\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/2c1030f2e84885cc58bffef6af67d5b9d2e7098f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/46d309996bd9251792d7dafdbaf615cf202b4447\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7885eb335d8f9e9942925d57e300a85e3f82ded4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/904025fa8bba1d028adade33346372b4ac1a9249\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/94b7782d0c8024f5b88454241c8d4777076c3786\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ae87aea330c24f462fc7058ed543ba8bc6798447\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c658c1c85ec235b7ecfbf8dbfee385b1332088f4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e61e355cbe49e585097eee28c15b862bfb1c0668\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-09-15T11:39:06+00:00",
      "cve": "CVE-2026-43370",
      "id": "CVE-2026-43370",
      "initial_release_date": "2026-05-08T00:00:00+00:00",
      "product_status:fixed": "612",
      "product_status:known_affected": "112",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: drm/amdgpu: Fix use-after-free race in VM acquire",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43370.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-16T00:13:51Z",
      "cve": "CVE-2026-43370",
      "id": "CVE-2026-43370",
      "initial_release_date": "2026-05-11T14:13:58Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "615",
      "product_status:known_not_affected": "51",
      "product_status:recommended": "314",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-43370",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-43370.json",
      "version": "10"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.