CVE-2026-43370: drm/amdgpu: Fix use-after-free race in VM acquire
Published May 8, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Fix use-after-free race in VM acquire
Replace non-atomic vm->processinfo assignment with cmpxchg() to prevent race when parent/child processes sharing a drmfile both try to acquire the same VM after fork().
(cherry picked from commit c7c573275ec20db05be769288a3e3bb2250ec618)
Affected Software
10 affected components
Linux Linux kernel (drm/amdgpu)
Linux Linux kernel>=4.17<5.10.253
Linux Linux kernel>=5.11<5.15.203
Linux Linux kernel>=5.16<6.1.167
Linux Linux kernel>=6.2<6.6.130
Linux Linux kernel>=6.7<6.12.78
Linux Linux kernel>=6.13<6.18.19
Linux Linux kernel>=6.19<6.19.9
Linux Linux kernel=7.0-rc1
Linux Linux kernel=7.0-rc2
Event History
May 8, 2026
CVE Published
via MITRE·02:21 PM
Data Sourced
via MITRE·02:21 PM
DescriptionSeverity
Data Sourced
via NVD·03:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-43370?
The severity of CVE-2026-43370 is high with a score of 7.8.
2
What type of vulnerability is CVE-2026-43370?
CVE-2026-43370 is classified as a Use After Free vulnerability.
3
How do I fix CVE-2026-43370?
To fix CVE-2026-43370, apply the available patch provided by the Linux kernel.
4
What software is affected by CVE-2026-43370?
CVE-2026-43370 affects the Linux kernel, specifically the drm/amdgpu component.
5
When was CVE-2026-43370 published?
CVE-2026-43370 was published on May 8, 2026.