CVE-2026-43369 Details
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix NULL pointer dereference in device cleanup When GPU initialization fails due to an unsupported HW block IP blocks may have a NULL version pointer. During cleanup in amdgpu_device_fini_hw, the code calls amdgpu_device_set_pg_state and amdgpu_device_set_cg_state which iterate over all IP blocks and access adev->ip_blocks[i].version without NULL checks, leading to a kernel NULL pointer dereference. Add NULL checks for adev->ip_blocks[i].version in both amdgpu_device_set_cg_state and amdgpu_device_set_pg_state to prevent dereferencing NULL pointers during GPU teardown when initialization has failed. (cherry picked from commit b7ac77468cda92eecae560b05f62f997a12fe2f2)
A NULL pointer dereference vulnerability has been addressed in the Linux kernel's AMD GPU driver. This issue occurs when GPU initialization fails due to an unsupported hardware block, leaving IP blocks with a NULL version pointer. During the cleanup process, the code improperly accesses these NULL pointers without checks, leading to a kernel crash. The vulnerability has been fixed by adding necessary NULL checks before accessing the version pointers, preventing the dereference of NULL values during GPU teardown after a failed initialization.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/062ea905fff7756b2e87143ffccaece5cdb44267 | kernel.org | Patch |
| https://git.kernel.org/stable/c/43025c941aced9a9009f9ff20eea4eb78c61deb8 | kernel.org | Patch |
| https://git.kernel.org/stable/c/767cd24d3c4ae847688877def4891943f6611ecd | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.18.16, < 6.18.19 >= 6.19.6, < 6.19.9 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 15, 2026 | Initial Analysis | [email protected] |
| May 8, 2026 | New CVE Received | kernel.org |