CVE-2026-43253

HIGH
MEDIUM Priority: 0.03 BB Relevance: 75/100
Published: 2026-05-06 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: move wait_on_sem() out of spinlock With iommu.strict=1, the existing completion wait path can cause soft lockups under stressed environment, as wait_on_sem() busy-waits under the spinlock with interrupts disabled. Move the completion wait in iommu_completion_wait() out of the spinlock. wait_on_sem() only polls the hardware-updated cmd_sem and does not require iommu->lock, so holding the lock during the busy wait unnecessarily increases contention and extends the time with interrupts disabled.

Weakness Classification (2)

Affected Software (8)

VendorProductVersion
Linux Linux 4bf5beef578e46393f11eb69dda7d17a065e05ff < 69d9339c02eddfc2a345be7220651068a3684383
Linux Linux 4bf5beef578e46393f11eb69dda7d17a065e05ff < f2f65b28d802a667119147444ec2ae33eebf9a58
Linux Linux 4bf5beef578e46393f11eb69dda7d17a065e05ff < 715c263119fd1b918a9fcbd8a36ea5b604a46324
Linux Linux 4bf5beef578e46393f11eb69dda7d17a065e05ff < e15768e68820142077bbca402d8e902f64ade1b0
Linux Linux 4bf5beef578e46393f11eb69dda7d17a065e05ff < 496269d12072ecb219826485bdbec70c92a8eef5
Linux Linux 4bf5beef578e46393f11eb69dda7d17a065e05ff < d2a0cac10597068567d336e85fa3cbdbe8ca62bf
Linux Linux 4.9
linux linux_kernel 4.9 – 6.6.128

Bug Bounty Relevance

75 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.34%
Raw Score 0.003400
Percentile 27.5%
Date 2026-10-30

EPSS Trend

2026-10-30
0.00340
2026-10-29
0.00340

Intelligence Sources

mitre ref →
nvd ref →