CVE-2026-43369

drm/amd: Fix NULL pointer dereference in device cleanup

MEDIUM
5.5
CVSS Score
Published: May 8, 2026 at 02:21 PM UTC
Updated: June 17, 2026 at 10:49 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix NULL pointer dereference in device cleanup When GPU initialization fails due to an unsupported HW block IP blocks may have a NULL version pointer. During cleanup in amdgpu_device_fini_hw, the code calls amdgpu_device_set_pg_state and amdgpu_device_set_cg_state which iterate over all IP blocks and access adev->ip_blocks[i].version without NULL checks, leading to a kernel NULL pointer dereference. Add NULL checks for adev->ip_blocks[i].version in both amdgpu_device_set_cg_state and amdgpu_device_set_pg_state to prevent dereferencing NULL pointers during GPU teardown when initialization has failed. (cherry picked from commit b7ac77468cda92eecae560b05f62f997a12fe2f2)

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.18.16 ≤ v < 6.18.196.19.6 ≤ v < 6.19.939fc2bc4da0082c226cbee331f0a5d44db3997da6.18.166.19.66d7ac4a0ebb6b7bc885274aa8b2bd9971f07013cfc58ef30e0a1524ce72a8e873d773ba3b0830c7d
Vendor states this is fixed in 062ea905fff7756b2e87143ffccaece5cdb44267 (fixed)
Vendor states this is fixed in 43025c941aced9a9009f9ff20eea4eb78c61deb8 (fixed)
Vendor states this is fixed in 767cd24d3c4ae847688877def4891943f6611ecd (fixed)
Affected range stops below 6.18.19, so it looks safe — our inference, not a vendor statement
Affected range stops below 6.19.9, so it looks safe — our inference, not a vendor statement

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card