What’s Vulnerable › Vulnerabilities
CVE-2026-43446: accel/amdxdna: Fix runtime suspend deadlock when there is pending job
- Severity: medium (CVSS 5.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-05-08 · updated 2026-10-15
- Weakness: CWE-667
Description
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix runtime suspend deadlock when there is pending job The runtime suspend callback drains the running job workqueue before suspending the device. If a job is still executing and calls pm_runtime_resume_and_get(), it can deadlock with the runtime suspend path. Fix this by moving pm_runtime_resume_and_get() from the job execution routine to the job submission routine, ensuring the device is resumed before the job is queued and avoiding the deadlock during runtime suspend.
Affected products
- Linux kernel: from 6.19 before 6.19.9; 7.0-rc1, 7.0-rc2, 7.0-rc3 — fixed in 6.19.9
How to fix
Upgrade to a fixed version: Linux kernel 6.19.9. Check the vendor advisory for mitigations.
References
- https://git.kernel.org/stable/c/6b13cb8f48a42ddf6dd98865b673a82e37ff238b
- https://git.kernel.org/stable/c/ac72e7385a2c7533dd766de4197134d96230be85
Get alerted when CVE-2026-43446 or the next vulnerability affects your stack