{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-43253","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","state":"PUBLISHED","assignerShortName":"Linux","dateReserved":"2026-05-01T14:12:55.996Z","datePublished":"2026-05-06T11:28:43.160Z","dateUpdated":"2026-05-11T22:20:58.379Z"},"containers":{"cna":{"providerMetadata":{"orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux","dateUpdated":"2026-05-11T22:20:58.379Z"},"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\niommu/amd: move wait_on_sem() out of spinlock\n\nWith iommu.strict=1, the existing completion wait path can cause soft\nlockups under stressed environment, as wait_on_sem() busy-waits under the\nspinlock with interrupts disabled.\n\nMove the completion wait in iommu_completion_wait() out of the spinlock.\nwait_on_sem() only polls the hardware-updated cmd_sem and does not require\niommu->lock, so holding the lock during the busy wait unnecessarily\nincreases contention and extends the time with interrupts disabled."}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH"}}],"affected":[{"product":"Linux","vendor":"Linux","defaultStatus":"unaffected","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/iommu/amd/iommu.c"],"versions":[{"version":"4bf5beef578e46393f11eb69dda7d17a065e05ff","lessThan":"f2f65b28d802a667119147444ec2ae33eebf9a58","status":"affected","versionType":"git"},{"version":"4bf5beef578e46393f11eb69dda7d17a065e05ff","lessThan":"715c263119fd1b918a9fcbd8a36ea5b604a46324","status":"affected","versionType":"git"},{"version":"4bf5beef578e46393f11eb69dda7d17a065e05ff","lessThan":"e15768e68820142077bbca402d8e902f64ade1b0","status":"affected","versionType":"git"},{"version":"4bf5beef578e46393f11eb69dda7d17a065e05ff","lessThan":"496269d12072ecb219826485bdbec70c92a8eef5","status":"affected","versionType":"git"},{"version":"4bf5beef578e46393f11eb69dda7d17a065e05ff","lessThan":"d2a0cac10597068567d336e85fa3cbdbe8ca62bf","status":"affected","versionType":"git"}]},{"product":"Linux","vendor":"Linux","defaultStatus":"affected","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/iommu/amd/iommu.c"],"versions":[{"version":"4.9","status":"affected"},{"version":"0","lessThan":"4.9","status":"unaffected","versionType":"semver"},{"version":"6.6.128","lessThanOrEqual":"6.6.*","status":"unaffected","versionType":"semver"},{"version":"6.12.75","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.16","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"6.19.6","lessThanOrEqual":"6.19.*","status":"unaffected","versionType":"semver"},{"version":"7.0","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.9","versionEndExcluding":"6.6.128"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.9","versionEndExcluding":"6.12.75"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.9","versionEndExcluding":"6.18.16"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.9","versionEndExcluding":"6.19.6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.9","versionEndExcluding":"7.0"}]}]}],"references":[{"url":"https://git.kernel.org/stable/c/f2f65b28d802a667119147444ec2ae33eebf9a58"},{"url":"https://git.kernel.org/stable/c/715c263119fd1b918a9fcbd8a36ea5b604a46324"},{"url":"https://git.kernel.org/stable/c/e15768e68820142077bbca402d8e902f64ade1b0"},{"url":"https://git.kernel.org/stable/c/496269d12072ecb219826485bdbec70c92a8eef5"},{"url":"https://git.kernel.org/stable/c/d2a0cac10597068567d336e85fa3cbdbe8ca62bf"}],"title":"iommu/amd: move wait_on_sem() out of spinlock","x_generator":{"engine":"bippy-1.2.0"}}}}