CVE-2026-43603
Awaiting Analysis Awaiting Analysis - Queue

NULL Pointer Dereference in Linux GPU Driver Leads to DoS

Publication date: 2026-11-03

Last updated on: 2026-11-03

Assigner: Advanced Micro Devices Inc.

Description
A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-03
Last Modified
2026-11-03
Generated
2026-11-03
AI Q&A
2026-11-03
EPSS Evaluated
N/A
NVD
CVE-2026-43603
EUVD
EUVD-2026-115875

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
amd gpu_linux_kernel_driver From 26.13 (inc)
amd linux_gpu_driver *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a NULL pointer dereference in the AMD GPU Linux kernel driver. It occurs when an application uses a specific graphics memory management interface to perform a clear operation under certain compute-processing conditions. The driver fails to validate an internal data reference before use, leading to a NULL reference being used. This triggers a kernel crash and causes a denial-of-service condition.

Detection Guidance

Detecting this vulnerability requires checking the version of the AMD GPU Linux kernel driver installed on your system. Compare the installed version against the patched versions mentioned in AMD's advisory (Radeon Software for Linux 26.13 or specific driver versions released between July 15-20, 2026). Use commands like 'modinfo amdgpu' or 'dkms status' to check driver versions.

Impact Analysis

This vulnerability allows a local user to crash the system, resulting in a denial-of-service. If exploited, it could cause the system to become unresponsive or reboot unexpectedly, disrupting normal operations.

Mitigation Strategies

Immediately update the AMD GPU Linux kernel driver to the latest patched version as specified by AMD (Radeon Software for Linux 26.13 or driver versions released between July 15-20, 2026). If updating is not immediately possible, restrict access to untrusted users or applications that could trigger the vulnerability until the update is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-43603. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...