CVE-2026-43369

drm/amd: Fix NULL pointer dereference in device cleanup

published May 8, 2026

CVSS
—
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/amd: Fix NULL pointer dereference in device cleanup

When GPU initialization fails due to an unsupported HW block

IP blocks may have a NULL version pointer. During cleanup in

amdgpu_device_fini_hw, the code calls amdgpu_device_set_pg_state and

amdgpu_device_set_cg_state which iterate over all IP blocks and access

adev->ip_blocks[i].version without NULL checks, leading to a kernel

NULL pointer dereference.

Add NULL checks for adev->ip_blocks[i].version in both

amdgpu_device_set_cg_state and amdgpu_device_set_pg_state to prevent

dereferencing NULL pointers during GPU teardown when initialization has

failed.

(cherry picked from commit b7ac77468cda92eecae560b05f62f997a12fe2f2)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.8th percentile
Published
2026-05-08T14:21Z
EPSS history
Timeline
  • 08 MAY 14:21Z
    drm/amd: Fix NULL pointer dereference in device cleanup
    cvelistv5