{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "87fc584a72bc47f984600f693501be06548d733e", "status": "affected", "version": "46d75d23005f87057881c460a94f9357d079087f", "versionType": "git"}, {"lessThan": "89008271744f13854cb30408cf9aaada313ebb4a", "status": "affected", "version": "46d75d23005f87057881c460a94f9357d079087f", "versionType": "git"}, {"lessThan": "8ee9aa80d4f1893a6699d46c403a1731548b544b", "status": "affected", "version": "46d75d23005f87057881c460a94f9357d079087f", "versionType": "git"}, {"lessThan": "f1db6fc5a834c8ca9485cc0596dd7df8b8619b64", "status": "affected", "version": "46d75d23005f87057881c460a94f9357d079087f", "versionType": "git"}, {"lessThan": "8980be03b3f9a4b58197ef95d3b37efa41a25331", "status": "affected", "version": "46d75d23005f87057881c460a94f9357d079087f", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.5"}, {"lessThan": "6.5", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.160", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.114", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.16", "versionType": "semver"}, {"lessThanOrEqual": "6.19.*", "status": "unaffected", "version": "6.19.6", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "3E703BE6-F0B6-4BD4-BFF3-22349CFA14FC", "versionEndExcluding": "6.18.16", "versionStartIncluding": "6.5", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "373EEEDA-FAA1-4FB4-B6ED-DB4DD99DBE67", "versionEndExcluding": "6.19.6", "versionStartIncluding": "6.19", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Skip vcn poison irq release on VF\n\nVF doesn't enable VCN poison irq in VCNv2.5. Skip releasing it and avoid\ncall trace during deinitialization.\n\n[ 71.913601] [drm] clean up the vf2pf work item\n[ 71.915088] ------------[ cut here ]------------\n[ 71.915092] WARNING: CPU: 3 PID: 1079 at /tmp/amd.aFkFvSQl/amd/amdgpu/amdgpu_irq.c:641 amdgpu_irq_put+0xc6/0xe0 [amdgpu]\n[ 71.915355] Modules linked in: amdgpu(OE-) amddrm_ttm_helper(OE) amdttm(OE) amddrm_buddy(OE) amdxcp(OE) amddrm_exec(OE) amd_sched(OE) amdkcl(OE) drm_suballoc_helper drm_display_helper cec rc_core i2c_algo_bit video wmi binfmt_misc nls_iso8859_1 intel_rapl_msr intel_rapl_common input_leds joydev serio_raw mac_hid qemu_fw_cfg sch_fq_codel dm_multipath scsi_dh_rdac scsi_dh_emc scsi_dh_alua efi_pstore ip_tables x_tables autofs4 btrfs blake2b_generic raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 hid_generic crct10dif_pclmul crc32_pclmul polyval_clmulni polyval_generic ghash_clmulni_intel usbhid 8139too sha256_ssse3 sha1_ssse3 hid psmouse bochs i2c_i801 ahci drm_vram_helper libahci i2c_smbus lpc_ich drm_ttm_helper 8139cp mii ttm aesni_intel crypto_simd cryptd\n[ 71.915484] CPU: 3 PID: 1079 Comm: rmmod Tainted: G OE 6.8.0-87-generic #88~22.04.1-Ubuntu\n[ 71.915489] Hardware name: Red Hat KVM/RHEL, BIOS 1.16.3-2.el9_5.1 04/01/2014\n[ 71.915492] RIP: 0010:amdgpu_irq_put+0xc6/0xe0 [amdgpu]\n[ 71.915768] Code: 75 84 b8 ea ff ff ff eb d4 44 89 ea 48 89 de 4c 89 e7 e8 fd fc ff ff 5b 41 5c 41 5d 41 5e 5d 31 d2 31 f6 31 ff e9 55 30 3b c7 <0f> 0b eb d4 b8 fe ff ff ff eb a8 e9 b7 3b 8a 00 66 2e 0f 1f 84 00\n[ 71.915771] RSP: 0018:ffffcf0800eafa30 EFLAGS: 00010246\n[ 71.915775] RAX: 0000000000000000 RBX: ffff891bda4b0668 RCX: 0000000000000000\n[ 71.915777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000\n[ 71.915779] RBP: ffffcf0800eafa50 R08: 0000000000000000 R09: 0000000000000000\n[ 71.915781] R10: 0000000000000000 R11: 0000000000000000 R12: ffff891bda480000\n[ 71.915782] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000\n[ 71.915792] FS: 000070cff87c4c40(0000) GS:ffff893abfb80000(0000) knlGS:0000000000000000\n[ 71.915795] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 71.915797] CR2: 00005fa13073e478 CR3: 000000010d634006 CR4: 0000000000770ef0\n[ 71.915800] PKRU: 55555554\n[ 71.915802] Call Trace:\n[ 71.915805] <TASK>\n[ 71.915809] vcn_v2_5_hw_fini+0x19e/0x1e0 [amdgpu]"}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: drm/amdgpu: Omitir la liberaci\u00f3n de la IRQ de envenenamiento de VCN en VF VF no habilita la IRQ de envenenamiento de VCN en VCNv2.5. Omitir su liberaci\u00f3n y evitar el rastreo de llamadas durante la desinicializaci\u00f3n. [ 71.913601] [drm] limpiar el elemento de trabajo vf2pf\n[ 71.915088] ------------[ cut here ]------------\n[ 71.915092] ADVERTENCIA: CPU: 3 PID: 1079 en /tmp/amd.aFkFvSQl/amd/amdgpu/amdgpu_irq.c:641 amdgpu_irq_put+0xc6/0xe0 [amdgpu]\n[ 71.915355] M\u00f3dulos enlazados: amdgpu(OE-) amddrm_ttm_helper(OE) amdttm(OE) amddrm_buddy(OE) amdxcp(OE) amddrm_exec(OE) amd_sched(OE) amdkcl(OE) drm_suballoc_helper drm_display_helper cec rc_core i2c_algo_bit video wmi binfmt_misc nls_iso8859_1 intel_rapl_msr intel_rapl_common input_leds joydev serio_raw mac_hid qemu_fw_cfg sch_fq_codel dm_multipath scsi_dh_rdac scsi_dh_emc scsi_dh_alua efi_pstore ip_tables x_tables autofs4 btrfs blake2b_generic raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 hid_generic crct10dif_pclmul crc32_pclmul polyval_clmulni polyval_generic ghash_clmulni_intel usbhid 8139too sha256_ssse3 sha1_ssse3 hid psmouse bochs i2c_i801 ahci drm_vram_helper libahci i2c_smbus lpc_ich drm_ttm_helper 8139cp mii ttm aesni_intel crypto_simd cryptd\n[ 71.915484] CPU: 3 PID: 1079 Comm: rmmod Corrompido: G OE 6.8.0-87-generic #88~22.04.1-Ubuntu\n[ 71.915489] Nombre del hardware: Red Hat KVM/RHEL, BIOS 1.16.3-2.el9_5.1 04/01/2014\n[ 71.915492] RIP: 0010:amdgpu_irq_put+0xc6/0xe0 [amdgpu]\n[ 71.915768] C\u00f3digo: 75 84 b8 ea ff ff ff eb d4 44 89 ea 48 89 de 4c 89 e7 e8 fd fc ff ff 5b 41 5c 41 5d 41 5e 5d 31 d2 31 f6 31 ff e9 55 30 3b c7 menor que 0fmayor que 0b eb d4 b8 fe ff ff ff eb a8 e9 b7 3b 8a 00 66 2e 0f 1f 84 00\n[ 71.915771] RSP: 0018:ffffcf0800eafa30 EFLAGS: 00010246\n[ 71.915775] RAX: 0000000000000000 RBX: ffff891bda4b0668 RCX: 0000000000000000\n[ 71.915777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000\n[ 71.915779] RBP: ffffcf0800eafa50 R08: 0000000000000000 R09: 0000000000000000\n[ 71.915781] R10: 0000000000000000 R11: 0000000000000000 R12: ffff891bda480000\n[ 71.915782] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000\n[ 71.915792] FS: 000070cff87c4c40(0000) GS:ffff893abfb80000(0000) knlGS:0000000000000000\n[ 71.915795] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 71.915797] CR2: 00005fa13073e478 CR3: 000000010d634006 CR4: 0000000000770ef0\n[ 71.915800] PKRU: 55555554\n[ 71.915802] Rastreo de llamadas:\n[ 71.915805] [TAREA]\n[ 71.915809] vcn_v2_5_hw_fini+0x19e/0x1e0 [amdgpu]"}], "id": "CVE-2026-43298", "lastModified": "2026-11-11T20:10:00.273", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-43298", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-06T15:33:42.061881Z", "version": "2.0.3"}}]}, "published": "2026-05-08T14:16:36.970", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/87fc584a72bc47f984600f693501be06548d733e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/89008271744f13854cb30408cf9aaada313ebb4a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/8980be03b3f9a4b58197ef95d3b37efa41a25331"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/8ee9aa80d4f1893a6699d46c403a1731548b544b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/f1db6fc5a834c8ca9485cc0596dd7df8b8619b64"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}