CVE-2026-43345

net: ipa: fix event ring index not programmed for IPA v5.0+

High · published May 8, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
49.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: ipa: fix event ring index not programmed for IPA v5.0+

For IPA v5.0+, the event ring index field moved from CH_C_CNTXT_0 to

CH_C_CNTXT_1. The v5.0 register definition intended to define this

field in the CH_C_CNTXT_1 fmask array but used the old identifier of

ERINDEX instead of CH_ERINDEX.

Without a valid event ring, GSI channels could never signal transfer

completions. This caused gsi_channel_trans_quiesce() to block

forever in wait_for_completion().

At least for IPA v5.2 this resolves an issue seen where runtime

suspend, system suspend, and remoteproc stop all hanged forever. It

also meant the IPA data path was completely non functional.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00630 · 49.5th percentile
Published
2026-05-08T13:39Z
EPSS history
Timeline
  • 08 MAY 13:39Z
    net: ipa: fix event ring index not programmed for IPA v5.0+
    cvelistv5