Junglewise Threat Intelligence

CVE-2026-43381: Linux Kernel nouveau denial of service in DPCD AUX transfer

CVE-2026-43381 · Severity: medium · CVSS 5.5 · Published 2026-05-08

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A vulnerability in the Linux kernel's NVIDIA graphics driver (nouveau) could allow a local user to crash the system. The issue occurs when software attempts to communicate with a DisplayPort device while the graphics hardware is in a low-power sleep state. This results in a system crash (kernel panic) rather than a standard error message, potentially leading to a denial of service.

Technical details

A vulnerability exists in the nouveau driver's DPCD (DisplayPort Configuration Data) implementation within the Linux kernel. When the GPU is in a runtime suspended state, attempts by userspace to access /dev/drm_dp_* trigger AUX transfers that the GSP (GPU System Processor) firmware code cannot handle, leading to a kernel crash in r535_gsp_msgq_wait. The fix introduces a check using pm_runtime_suspended() in nouveau_connector_aux_xfer to return -EBUSY instead of proceeding with the transfer. This is a local denial-of-service vulnerability requiring low privileges to trigger via standard DRM device nodes.

Affected products

  • Linux Linux Kernel 3.16 to 5.10.253, 5.11 to 5.15.203, 5.16 to 6.1.167, 6.2 to 6.6.130, 6.7 to 6.12.78, 6.13 to 6.18.19, 6.19 to 6.19.9, 7.0-rc1, 7.0-rc2

Timeline

  • 2026-02-24: disclosed: Initial patch authored by Dave Airlie
  • 2026-05-08: advisory: CVE-2026-43381 published by kernel.org
  • 2026-05-26: other: NVD analysis completed

References

Related threats