Junglewise Threat Intelligence

CVE-2026-43298: Linux Kernel amdgpu kernel warning in VCN deinitialization

CVE-2026-43298 · Severity: info · CVSS 0 · Published 2026-05-08

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A bug in the Linux kernel's AMD graphics driver could cause a system warning or instability when shutting down or removing the driver on certain virtualized systems. This occurs because the system tries to release a hardware resource that was never actually activated. While primarily a technical error, it can lead to unexpected system behavior during maintenance or deinitialization.

Technical details

A vulnerability in the amdgpu driver's VCN (Video Core Next) component, specifically in version 2.5, causes a kernel call trace during hardware deinitialization. The root cause is that the driver attempts to call 'amdgpu_irq_put' for a RAS poison interrupt on a Virtual Function (VF) environment, even though VFs do not enable these interrupts. This results in a kernel warning at 'amdgpu_irq.c' during 'vcn_v2_5_hw_fini'. The fix introduces a check to skip this release operation if the device is running as an SRIOV VF. Patches have been merged into the stable Linux kernel tree.

Affected products

  • Linux Linux Kernel VCNv2.5

Timeline

  • 2026-01-22: other: Patch authored by Lijo Lazar
  • 2026-05-08: disclosed: CVE published

References

Related threats