PT-2026-39031
CVE-2026-43370
·
Published
2026-02-05
·
Updated
2026-10-21
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A use-after-free race condition exists in the drm/amdgpu component during VM acquire. This occurs when parent and child processes sharing a drm file both attempt to acquire the same VM after a fork() operation, caused by a non-atomic assignment to
vm->process info.Recommendations
Replace the non-atomic
vm->process info assignment with cmpxchg() to ensure atomic operations and prevent the race condition. Found an issue in the description? Have something to add? Feel free to write us 👾