Junglewise Threat Intelligence

CVE-2026-43370: Linux Kernel amdgpu use-after-free in VM acquire

CVE-2026-43370 · Severity: high · CVSS 7.8 · Published 2026-05-08

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A vulnerability in the Linux kernel's AMD GPU driver could allow a local user to crash the system or potentially execute unauthorized code. The issue occurs when parent and child processes attempt to access the same graphics memory resources simultaneously after a process split (fork). This race condition can lead to memory corruption, impacting the stability and security of systems using AMD graphics hardware.

Technical details

A use-after-free vulnerability exists in the amdgpu driver (specifically within the KFD GPUVM component) due to a race condition in VM acquisition. The root cause is a non-atomic assignment to 'vm->process_info' in 'init_kfd_vm'. When parent and child processes share a 'drm_file' and both attempt to acquire the same VM after a fork() call, the lack of synchronization allows for concurrent access. An attacker with local access can exploit this race to trigger memory corruption. The fix replaces the non-atomic assignment with a 'cmpxchg()' operation to ensure atomic updates and prevent multiple processes from acquiring the same VM simultaneously.

Affected products

  • Linux Linux Kernel amdgpu driver

Timeline

  • 2026-02-05: other: Patch authored by AMD
  • 2026-05-08: disclosed: CVE published

References

Related threats