CVE catalog

CVE-2026-43298

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip vcn poison irq release on VF VF doesn't enable VCN poison irq in VCNv2.5. Skip releasing it and avoid call trace

[CVE catalog]

Severity: Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published: May 8, 2026, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.15% · Oct 25, 2026

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip vcn poison irq release on VF VF doesn't enable VCN poison irq in VCNv2.5. Skip releasing it and avoid call trace during deinitialization. [ 71.913601] [drm] clean up the vf2pf work item [ 71.915088] ------------[ cut here ]------------ [ 71.915092] WARNING: CPU: 3 PID: 1079 at /tmp/amd.aFkFvSQl/amd/amdgpu/amdgpu_irq.c:641 amdgpu_irq_put+0xc6/0xe0 [amdgpu] [ 71.915355] Modules linked in: amdgpu(OE-) amddrm_ttm_helper(OE) amdttm(OE) amddrm_buddy(OE) amdxcp(OE) amddrm_exec(OE) amd_sched(OE) amdkcl(OE) drm_suballoc_helper drm_display_helper cec rc_core i2c_algo_bit video wmi binfmt_misc nls_iso8859_1 intel_rapl_msr intel_rapl_common input_leds joydev serio_raw mac_hid qemu_fw_cfg sch_fq_codel dm_multipath scsi_dh_rdac scsi_dh_emc scsi_dh_alua efi_pstore ip_tables x_tables autofs4 btrfs blake2b_generic raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 hid_generic crct10dif_pclmul crc32_pclmul polyval_clmulni polyval_generic ghash_clmulni_intel usbhid 8139too sha256_ssse3 sha1_ssse3 hid psmouse bochs i2c_i801 ahci drm_vram_helper libahci i2c_smbus lpc_ich drm_ttm_helper 8139cp mii ttm aesni_intel crypto_simd cryptd [ 71.915484] CPU: 3 PID: 1079 Comm: rmmod Tainted: G OE 6.8.0-87-generic #88~22.04.1-Ubuntu [ 71.915489] Hardware name: Red Hat KVM/RHEL, BIOS 1.16.3-2.el9_5.1 04/01/2014 [ 71.915492] RIP: 0010:amdgpu_irq_put+0xc6/0xe0 [amdgpu] [ 71.915768] Code: 75 84 b8 ea ff ff ff eb d4 44 89 ea 48 89 de 4c 89 e7 e8 fd fc ff ff 5b 41 5c 41 5d 41 5e 5d 31 d2 31 f6 31 ff e9 55 30 3b c7 <0f> 0b eb d4 b8 fe ff ff ff eb a8 e9 b7 3b 8a 00 66 2e 0f 1f 84 00 [ 71.915771] RSP: 0018:ffffcf0800eafa30 EFLAGS: 00010246 [ 71.915775] RAX: 0000000000000000 RBX: ffff891bda4b0668 RCX: 0000000000000000 [ 71.915777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.915779] RBP: ffffcf0800eafa50 R08: 0000000000000000 R09: 0000000000000000 [ 71.915781] R10: 0000000000000000 R11: 0000000000000000 R12: ffff891bda480000 [ 71.915782] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 71.915792] FS: 000070cff87c4c40(0000) GS:ffff893abfb80000(0000) knlGS:0000000000000000 [ 71.915795] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.915797] CR2: 00005fa13073e478 CR3: 000000010d634006 CR4: 0000000000770ef0 [ 71.915800] PKRU: 55555554 [ 71.915802] Call Trace: [ 71.915805] <TASK> [ 71.915809] vcn_v2_5_hw_fini+0x19e/0x1e0 [amdgpu]

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	linux	sid	`7.2.12-1`	fixed
Debian	linux	forky	`7.2.12-1`	fixed
Debian	linux	trixie	`6.12.107-1`	vulnerable
Debian	linux	trixie-security	`6.12.113-1`	vulnerable
Debian	linux	bookworm	`6.1.176-1`	not affected
Debian	linux	bookworm-security	`6.1.190-1`	not affected
Cpe	linux_kernel	Not reported	`6.18.16`	fixed
Cpe	linux_kernel	Not reported	`6.19.6`	fixed
Cpe	linux_kernel	Not reported	`6.19.6`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	linux	source	sid	`6.19.6-1`	not yet assigned	Not reported	Not reported
Debian	linux	source	forky	`6.19.6-1`	not yet assigned	Not reported	Not reported
Debian	linux	source	trixie	`(unfixed)`	not yet assigned	Not reported	Not reported
Debian	linux	source	bookworm	`Not affected`	unimportant	Not reported	Not reported
Cpe	linux_kernel	cpe	Not reported	`6.18.16`	Not reported	Not reported	Not reported
Cpe	linux_kernel	cpe	Not reported	`6.19.6`	Not reported	Not reported	Not reported
Cpe	linux_kernel	cpe	Not reported	`6.19.6`	Not reported	NVD-CVE-2026-43298	Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

[bpftool]Affected
Source package: [linux]
Details (10)
- 7.5.0+6.12.94-1 · amd64 · trixie
  Affected
  nvd · linux · debian · 13
- 7.5.0+6.12.94-1 · arm64 · trixie
  Affected
  nvd · linux · debian · 13
- 7.8.0+7.1.8-1~bpo13+1 · amd64 · trixie-backports
  Affected
  nvd · linux · debian · 13
- 7.8.0+7.1.8-1~bpo13+1 · arm64 · trixie-backports
  Affected
  nvd · linux · debian · 13
- 7.5.0+6.12.101-1 · amd64 · trixie-security · Historical version
  Affected
  nvd · linux · debian · 13
- 7.5.0+6.12.105-1 · amd64 · trixie-security · Historical version
  Affected
  nvd · linux · debian · 13
- 7.5.0+6.12.107-1 · amd64 · trixie-security · Historical version
  Affected
  nvd · linux · debian · 13
- 7.5.0+6.12.107-1 · arm64 · trixie-security
  Affected
  nvd · linux · debian · 13
- 7.5.0+6.12.111-1 · amd64 · trixie-security · Historical version
  Affected
  nvd · linux · debian · 13
- 7.5.0+6.12.113-1 · amd64 · trixie-security
  Affected
  nvd · linux · debian · 13
[hyperv-daemons]Affected
Source package: [linux]
Details (10)
- 6.12.94-1 · amd64 · trixie
  Affected
  nvd · linux · debian · 13
- 6.12.94-1 · arm64 · trixie
  Affected
  nvd · linux · debian · 13
- 7.1.8-1~bpo13+1 · amd64 · trixie-backports
  Affected
  nvd · linux · debian · 13
- 7.1.8-1~bpo13+1 · arm64 · trixie-backports
  Affected
  nvd · linux · debian · 13
- 6.12.101-1 · amd64 · trixie-security · Historical version
  Affected
  nvd · linux · debian · 13
- 6.12.105-1 · amd64 · trixie-security · Historical version
  Affected
  nvd · linux · debian · 13
- 6.12.107-1 · amd64 · trixie-security · Historical version
  Affected
  nvd · linux · debian · 13
- 6.12.107-1 · arm64 · trixie-security
  Affected
  nvd · linux · debian · 13
- 6.12.111-1 · amd64 · trixie-security · Historical version
  Affected
  nvd · linux · debian · 13
- 6.12.113-1 · amd64 · trixie-security
  Affected
  nvd · linux · debian · 13
[intel-sdsi]Affected
Source package: [linux]
Details (7)
- 6.12.94-1 · amd64 · trixie
  Affected
  nvd · linux · debian · 13
- 7.1.8-1~bpo13+1 · amd64 · trixie-backports
  Affected
  nvd · linux · debian · 13
- 6.12.101-1 · amd64 · trixie-security · Historical version
  Affected
  nvd · linux · debian · 13
- 6.12.105-1 · amd64 · trixie-security · Historical version
  Affected
  nvd · linux · debian · 13
- 6.12.107-1 · amd64 · trixie-security · Historical version
  Affected
  nvd · linux · debian · 13
- 6.12.111-1 · amd64 · trixie-security · Historical version
  Affected
  nvd · linux · debian · 13
- 6.12.113-1 · amd64 · trixie-security
  Affected
  nvd · linux · debian · 13
[libcpupower1]Affected
Source package: [linux]
Details (10)
- 6.12.94-1 · amd64 · trixie
  Affected
  nvd · linux · debian · 13
- 6.12.94-1 · arm64 · trixie
  Affected
  nvd · linux · debian · 13
- 7.1.8-1~bpo13+1 · amd64 · trixie-backports
  Affected
  nvd · linux · debian · 13
- 7.1.8-1~bpo13+1 · arm64 · trixie-backports
  Affected
  nvd · linux · debian · 13
- 6.12.101-1 · amd64 · trixie-security · Historical version
  Affected
  nvd · linux · debian · 13
- 6.12.105-1 · amd64 · trixie-security · Historical version
  Affected
  nvd · linux · debian · 13
- 6.12.107-1 · amd64 · trixie-security · Historical version
  Affected
  nvd · linux · debian · 13
- 6.12.107-1 · arm64 · trixie-security
  Affected
  nvd · linux · debian · 13
- 6.12.111-1 · amd64 · trixie-security · Historical version
  Affected
  nvd · linux · debian · 13
- 6.12.113-1 · amd64 · trixie-security
  Affected
  nvd · linux · debian · 13
[libcpupower-dev]Affected
Source package: [linux]
Details (10)
- 6.12.94-1 · amd64 · trixie
  Affected
  nvd · linux · debian · 13
- 6.12.94-1 · arm64 · trixie
  Affected
  nvd · linux · debian · 13
- 7.1.8-1~bpo13+1 · amd64 · trixie-backports
  Affected
  nvd · linux · debian · 13
- 7.1.8-1~bpo13+1 · arm64 · trixie-backports
  Affected
  nvd · linux · debian · 13
- 6.12.101-1 · amd64 · trixie-security · Historical version
  Affected
  nvd · linux · debian · 13
- 6.12.105-1 · amd64 · trixie-security · Historical version
  Affected
  nvd · linux · debian · 13
- 6.12.107-1 · amd64 · trixie-security · Historical version
  Affected
  nvd · linux · debian · 13
- 6.12.107-1 · arm64 · trixie-security
  Affected
  nvd · linux · debian · 13
- 6.12.111-1 · amd64 · trixie-security · Historical version
  Affected
  nvd · linux · debian · 13
- 6.12.113-1 · amd64 · trixie-security
  Affected
  nvd · linux · debian · 13
[linux-base-6.18.12+deb13-amd64]Affected
Source package: [linux]
Details (1)
- 6.18.12-1~bpo13+1 · amd64 · trixie-backports
  Affected
  nvd · linux · debian · 13
[linux-base-6.18.12+deb13-arm64]Affected
Source package: [linux]
Details (1)
- 6.18.12-1~bpo13+1 · arm64 · trixie-backports
  Affected
  nvd · linux · debian · 13
[linux-base-6.18.12+deb13-arm64-16k]Affected
Source package: [linux]
Details (1)
- 6.18.12-1~bpo13+1 · arm64 · trixie-backports
  Affected
  nvd · linux · debian · 13
[linux-base-6.18.12+deb13-cloud-amd64]Affected
Source package: [linux]
Details (1)
- 6.18.12-1~bpo13+1 · amd64 · trixie-backports
  Affected
  nvd · linux · debian · 13
[linux-base-6.18.12+deb13-cloud-arm64]Affected
Source package: [linux]
Details (1)
- 6.18.12-1~bpo13+1 · arm64 · trixie-backports
  Affected
  nvd · linux · debian · 13
[linux-base-6.18.12+deb13-rt-amd64]Affected
Source package: [linux]
Details (1)
- 6.18.12-1~bpo13+1 · amd64 · trixie-backports
  Affected
  nvd · linux · debian · 13
[linux-base-6.18.12+deb13-rt-arm64]Affected
Source package: [linux]
Details (1)
- 6.18.12-1~bpo13+1 · arm64 · trixie-backports
  Affected
  nvd · linux · debian · 13
[linux-base-6.18.15+deb13-amd64]Affected
Source package: [linux]
Details (1)
- 6.18.15-1~bpo13+1 · amd64 · trixie-backports
  Affected
  nvd · linux · debian · 13
[linux-base-6.18.15+deb13-arm64]Affected
Source package: [linux]
Details (1)
- 6.18.15-1~bpo13+1 · arm64 · trixie-backports
  Affected
  nvd · linux · debian · 13
[linux-base-6.18.15+deb13-arm64-16k]Affected
Source package: [linux]
Details (1)
- 6.18.15-1~bpo13+1 · arm64 · trixie-backports
  Affected
  nvd · linux · debian · 13
[linux-base-6.18.15+deb13-cloud-amd64]Affected
Source package: [linux]
Details (1)
- 6.18.15-1~bpo13+1 · amd64 · trixie-backports
  Affected
  nvd · linux · debian · 13
[linux-base-6.18.15+deb13-cloud-arm64]Affected
Source package: [linux]
Details (1)
- 6.18.15-1~bpo13+1 · arm64 · trixie-backports
  Affected
  nvd · linux · debian · 13
[linux-base-6.18.15+deb13-rt-amd64]Affected
Source package: [linux]
Details (1)
- 6.18.15-1~bpo13+1 · amd64 · trixie-backports
  Affected
  nvd · linux · debian · 13
[linux-base-6.18.15+deb13-rt-arm64]Affected
Source package: [linux]
Details (1)
- 6.18.15-1~bpo13+1 · arm64 · trixie-backports
  Affected
  nvd · linux · debian · 13
[linux-base-6.18.5+deb13-amd64]Affected
Source package: [linux]
Details (1)
- 6.18.5-1~bpo13+1 · amd64 · trixie-backports
  Affected
  nvd · linux · debian · 13

Next results

Observed: Oct 27, 2026, 7:37:37 AM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]