CVE-2026-43318 drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify
A synchronization bug in the AMD GPU driver can cause page faults and system instability during buffer moves between GPUs.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-43318?
CVE-2026-43318 is a medium-severity vulnerability in Linux kernel, published on 8 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify
Invalidating a dmabuf will impact other users of the shared BO. In the scenario where process A moves the BO, it needs to inform process B about the move and process B will need to update its page table.
The commit fixes a synchronisation bug caused by the use of the ticket: it made amdgpu_vm_handle_moved behave as if updating the page table immediately was correct but in this case it's not.
An example is the following scenario, with 2 GPUs and glxgears running on GPU0 and Xorg running on GPU1, on a system where P2P PCI isn't supported:
glxgears: export linear buffer from GPU0 and import using GPU1 submit frame rendering to GPU0 submit tiled->linear blit Xorg: copy of linear buffer
The sequence of jobs would be: drm_sched_job_run # GPU0, frame rendering drm_sched_job_queue # GPU0, blit drm_sched_job_done # GPU0, frame rendering drm_sched_job_run # GPU0, blit move linear buffer for GPU1 access # amdgpu_dma_buf_move_notify -> update pt # GPU0
It this point the blit job on GPU0 is still running and would likely produce a page fault.
Which versions are affected by CVE-2026-43318?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-43318?
Apply the vendor's patch.
Is CVE-2026-43318 being exploited?
There is no known exploitation of CVE-2026-43318 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-86121, BELL-CVE-2026-43318, DEBIAN-CVE-2026-43318, GHSA-hgcg-jj48-wj2h, ROOT-OS-DEBIAN-11-CVE-2026-43318, ROOT-OS-DEBIAN-12-CVE-2026-43318 and 3 more.