{"id":"CVE-2026-43253","aliases":[],"cve":{"records":[{"id":"CVE-2026-43253","source":"Linux","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-05-01T14:12:55.996Z","published":"2026-05-06T11:28:43.160Z","modified":"2026-10-30T12:25:19.840Z"}],"publishers":[{"name":"Linux","role":"CNA","organizationId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","modified":"2026-10-30T12:25:19.840Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-19T19:16:25.458Z"}],"references":[{"url":"https://git.kernel.org/stable/c/69d9339c02eddfc2a345be7220651068a3684383","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/f2f65b28d802a667119147444ec2ae33eebf9a58","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/715c263119fd1b918a9fcbd8a36ea5b604a46324","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/e15768e68820142077bbca402d8e902f64ade1b0","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/496269d12072ecb219826485bdbec70c92a8eef5","tags":[],"source":"Linux"},{"url":"https://git.kernel.org/stable/c/d2a0cac10597068567d336e85fa3cbdbe8ca62bf","tags":[],"source":"Linux"}],"weaknesses":[{"id":"CWE-833","description":"CWE-833 Deadlock","source":"CISA-ADP"}],"applicability":[{"source":"Linux","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.9","versionEndExcluding":"6.1.191"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.9","versionEndExcluding":"6.6.128"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.9","versionEndExcluding":"6.12.75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.9","versionEndExcluding":"6.18.16"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.9","versionEndExcluding":"6.19.6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.9","versionEndExcluding":"7.0"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-16T15:16:08.841212Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"yes"},{"name":"Technical Impact","value":"partial"}]}]},"title":"iommu/amd: move wait_on_sem() out of spinlock","titleSource":"Linux","descriptionSource":"Linux","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niommu/amd: move wait_on_sem() out of spinlock\n\nWith iommu.strict=1, the existing completion wait path can cause soft\nlockups under stressed environment, as wait_on_sem() busy-waits under the\nspinlock with interrupts disabled.\n\nMove the completion wait in iommu_completion_wait() out of the spinlock.\nwait_on_sem() only polls the hardware-updated cmd_sem and does not require\niommu->lock, so holding the lock during the busy wait unnecessarily\nincreases contention and extends the time with interrupts disabled.","score":7.5,"severity":"high","published":"2026-05-06T11:28:43.160Z","modified":"2026-10-30T12:25:19.840Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Linux","name":"Linux","platforms":[],"versions":[{"version":"4bf5beef578e46393f11eb69dda7d17a065e05ff","status":"affected","lessThan":"69d9339c02eddfc2a345be7220651068a3684383","versionType":"git"},{"version":"4bf5beef578e46393f11eb69dda7d17a065e05ff","status":"affected","lessThan":"f2f65b28d802a667119147444ec2ae33eebf9a58","versionType":"git"},{"version":"4bf5beef578e46393f11eb69dda7d17a065e05ff","status":"affected","lessThan":"715c263119fd1b918a9fcbd8a36ea5b604a46324","versionType":"git"},{"version":"4bf5beef578e46393f11eb69dda7d17a065e05ff","status":"affected","lessThan":"e15768e68820142077bbca402d8e902f64ade1b0","versionType":"git"},{"version":"4bf5beef578e46393f11eb69dda7d17a065e05ff","status":"affected","lessThan":"496269d12072ecb219826485bdbec70c92a8eef5","versionType":"git"},{"version":"4bf5beef578e46393f11eb69dda7d17a065e05ff","status":"affected","lessThan":"d2a0cac10597068567d336e85fa3cbdbe8ca62bf","versionType":"git"}],"defaultStatus":"unaffected","cpes":[],"source":"Linux","url":"https://www.cve.org/CVERecord?id=CVE-2026-43253"},{"vendor":"Linux","name":"Linux","platforms":[],"versions":[{"version":"4.9","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.9","versionType":"semver"},{"version":"6.1.191","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.128","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.75","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.16","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"6.19.6","status":"unaffected","lessThanOrEqual":"6.19.*","versionType":"semver"},{"version":"7.0","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"defaultStatus":"affected","cpes":[],"source":"Linux","url":"https://www.cve.org/CVERecord?id=CVE-2026-43253"}],"remediation":[],"references":["https://git.kernel.org/stable/c/69d9339c02eddfc2a345be7220651068a3684383","https://git.kernel.org/stable/c/f2f65b28d802a667119147444ec2ae33eebf9a58","https://git.kernel.org/stable/c/715c263119fd1b918a9fcbd8a36ea5b604a46324","https://git.kernel.org/stable/c/e15768e68820142077bbca402d8e902f64ade1b0","https://git.kernel.org/stable/c/496269d12072ecb219826485bdbec70c92a8eef5","https://git.kernel.org/stable/c/d2a0cac10597068567d336e85fa3cbdbe8ca62bf"],"sources":[{"name":"CVE","id":"CVE-2026-43253","modified":"2026-10-30T12:25:19.840Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-43253"}],"assessments":[{"source":"Linux","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5}],"sourceAffected":[],"observedAt":"2026-10-30T12:50:41.361Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:25:31.038Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":null}