CVE-2026-43381 Details
Description
In the Linux kernel, the following vulnerability has been resolved: nouveau/dpcd: return EBUSY for aux xfer if the device is asleep If we have runtime suspended, and userspace wants to use /dev/drm_dp_* then just tell it the device is busy instead of crashing in the GSP code. WARNING: CPU: 2 PID: 565741 at drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/rpc.c:164 r535_gsp_msgq_wait+0x9a/0xb0 [nouveau] CPU: 2 UID: 0 PID: 565741 Comm: fwupd Not tainted 6.18.10-200.fc43.x86_64 #1 PREEMPT(lazy) Hardware name: LENOVO 20QTS0PQ00/20QTS0PQ00, BIOS N2OET65W (1.52 ) 08/05/2024 RIP: 0010:r535_gsp_msgq_wait+0x9a/0xb0 [nouveau] This is a simple fix to get backported. We should probably engineer a proper power domain solution to wake up devices and keep them awake while fw updates are happening.
A vulnerability in the Linux kernel's Nouveau graphics driver has been addressed. The issue occurred when a device was in a sleep state, and userspace attempted to initiate an auxiliary transfer via the DisplayPort protocol. Instead of properly handling the request, the driver crashed. The vulnerability was present in several versions of the Linux kernel, including 6.18.10-200.fc43.x86_64.
Users can update to the latest version of the Linux kernel, where this vulnerability has been fixed. Instructions for updating the kernel can be found in the official Linux documentation.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/178df7c91e6c202579284df9f79d1592a514cdcf | kernel.org | Patch |
| https://git.kernel.org/stable/c/24639553a016578222ac597db924dfb6fa5ec8b5 | kernel.org | Patch |
| https://git.kernel.org/stable/c/4df518aa196085909fd7e32518ecd27fba60ed69 | kernel.org | Patch |
| https://git.kernel.org/stable/c/6bdd2d70c338d52c387d3b3aadc596784ae81b01 | kernel.org | Patch |
| https://git.kernel.org/stable/c/8f3c6f08ababad2e3bdd239728cf66a9949446b4 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ad8fa5bff53f5d1f8394f996850da8ce070eaee3 | kernel.org | Patch |
| https://git.kernel.org/stable/c/cd24cab2023aa46b595bc6b9cc39d8973d9d0a8c | kernel.org | Patch |
| https://git.kernel.org/stable/c/fad178ae894930520519ead3c8e0150641466360 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 3.16, < 5.10.253 >= 5.11, < 5.15.203 >= 5.16, < 6.1.167 >= 6.2, < 6.6.130 >= 6.7, < 6.12.78 >= 6.13, < 6.18.19 >= 6.19, < 6.19.9 7.0 rc1 7.0 rc2 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 26, 2026 | Initial Analysis | [email protected] |
| May 8, 2026 | New CVE Received | kernel.org |