CVE-2026-43370EPSS p2.1%
CVE-2026-43370CVE-2026-43370
linux / linux_kernel
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: Fix use-after-free race in VM acquire
Replace non-atomic vm->process_info assignment with cmpxchg()
to prevent race when parent/child processes sharing a drm_file
both try to acquire the same VM after fork().
(cherry picked from commit c7c573275ec20db05be769288a3e3bb2250ec618)
Scoring
| CVSS | 7.8 () |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 0.13% probability of exploitation · percentile 2.1% · 2026-10-17T12:00:28Z |
| Last modified | 2026-10-16 |