CVE-2026-43298: drm/amdgpu: Skip vcn poison irq release on VF
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Skip vcn poison irq release on VF
VF doesn't enable VCN poison irq in VCNv2.5. Skip releasing it and avoid call trace during deinitialization.
[ 71.913601] [drm] clean up the vf2pf work item [ 71.915088] ------------[ cut here ]------------ [ 71.915092] WARNING: CPU: 3 PID: 1079 at /tmp/amd.aFkFvSQl/amd/amdgpu/amdgpuirq.c:641 amdgpuirqput+0xc6/0xe0 [amdgpu] [ 71.915355] Modules linked in: amdgpu(OE-) amddrmttmhelper(OE) amdttm(OE) amddrmbuddy(OE) amdxcp(OE) amddrmexec(OE) amdsched(OE) amdkcl(OE) drmsuballochelper drmdisplayhelper cec rccore i2calgobit video wmi binfmtmisc nlsiso88591 intelraplmsr intelraplcommon inputleds joydev serioraw machid qemufwcfg schfqcodel dmmultipath scsidhrdac scsidhemc scsidhalua efipstore iptables xtables autofs4 btrfs blake2bgeneric raid10 raid456 asyncraid6recov asyncmemcpy asyncpq asyncxor asynctx xor raid6pq libcrc32c raid1 raid0 hidgeneric crct10difpclmul crc32pclmul polyvalclmulni polyvalgeneric ghashclmulniintel usbhid 8139too sha256ssse3 sha1ssse3 hid psmouse bochs i2ci801 ahci drmvramhelper libahci i2csmbus lpcich drmttmhelper 8139cp mii ttm aesniintel cryptosimd cryptd [ 71.915484] CPU: 3 PID: 1079 Comm: rmmod Tainted: G OE 6.8.0-87-generic #88~22.04.1-Ubuntu [ 71.915489] Hardware name: Red Hat KVM/RHEL, BIOS 1.16.3-2.el95.1 04/01/2014 [ 71.915492] RIP: 0010:amdgpuirqput+0xc6/0xe0 [amdgpu] [ 71.915768] Code: 75 84 b8 ea ff ff ff eb d4 44 89 ea 48 89 de 4c 89 e7 e8 fd fc ff ff 5b 41 5c 41 5d 41 5e 5d 31 d2 31 f6 31 ff e9 55 30 3b c7 <0f> 0b eb d4 b8 fe ff ff ff eb a8 e9 b7 3b 8a 00 66 2e 0f 1f 84 00 [ 71.915771] RSP: 0018:ffffcf0800eafa30 EFLAGS: 00010246 [ 71.915775] RAX: 0000000000000000 RBX: ffff891bda4b0668 RCX: 0000000000000000 [ 71.915777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.915779] RBP: ffffcf0800eafa50 R08: 0000000000000000 R09: 0000000000000000 [ 71.915781] R10: 0000000000000000 R11: 0000000000000000 R12: ffff891bda480000 [ 71.915782] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 71.915792] FS: 000070cff87c4c40(0000) GS:ffff893abfb80000(0000) knlGS:0000000000000000 [ 71.915795] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.915797] CR2: 00005fa13073e478 CR3: 000000010d634006 CR4: 0000000000770ef0 [ 71.915800] PKRU: 55555554 [ 71.915802] Call Trace: [ 71.915805] <TASK> [ 71.915809] vcnv25hwfini+0x19e/0x1e0 [amdgpu]
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Skip releasing the VCN poison IRQ on VF because VF does not enable the VCN poison IRQ in VCNv2.5, avoiding the deinitialization call trace.
drm/amdgpu VCN poison IRQ release on VF = skip
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43298?
CVE-2026-43298 is classified as a low severity vulnerability in the Linux kernel affecting the AMD amdgpu driver.
How do I fix CVE-2026-43298?
To fix CVE-2026-43298, ensure that you update your Linux kernel to the latest stable version that addresses this vulnerability.
What causes CVE-2026-43298?
CVE-2026-43298 is caused by the AMD amdgpu driver not properly handling the release of the VCN poison IRQ on a virtual function (VF) during deinitialization.
Which systems are affected by CVE-2026-43298?
CVE-2026-43298 affects systems running the AMD amdgpu driver within the Linux kernel.
Is CVE-2026-43298 a serious threat to my system?
CVE-2026-43298 poses a low threat level, primarily causing unnecessary call traces during the deinitialization process.