Riskcovery

CVE-2026-43381

nouveau/dpcd: return EBUSY for aux xfer if the device is asleep

State
Published
Severity
Not scored
Published
May 8, 2026
Updated
May 11, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nouveau/dpcd: return EBUSY for aux xfer if the device is asleep

If we have runtime suspended, and userspace wants to use /dev/drm_dp_* then just tell it the device is busy instead of crashing in the GSP code.

WARNING: CPU: 2 PID: 565741 at drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/rpc.c:164 r535_gsp_msgq_wait+0x9a/0xb0 [nouveau] CPU: 2 UID: 0 PID: 565741 Comm: fwupd Not tainted 6.18.10-200.fc43.x86_64 #1 PREEMPT(lazy) Hardware name: LENOVO 20QTS0PQ00/20QTS0PQ00, BIOS N2OET65W (1.52 ) 08/05/2024 RIP: 0010:r535_gsp_msgq_wait+0x9a/0xb0 [nouveau]

This is a simple fix to get backported. We should probably engineer a proper power domain solution to wake up devices and keep them awake while fw updates are happening.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8894f4919bc43f821775db2cfff4b917871b2102 to before 178df7c91e6c202579284df9f79d1592a514cdcfAffected
  • 8894f4919bc43f821775db2cfff4b917871b2102 to before 4df518aa196085909fd7e32518ecd27fba60ed69Affected
  • 8894f4919bc43f821775db2cfff4b917871b2102 to before cd24cab2023aa46b595bc6b9cc39d8973d9d0a8cAffected
  • 8894f4919bc43f821775db2cfff4b917871b2102 to before fad178ae894930520519ead3c8e0150641466360Affected
  • 8894f4919bc43f821775db2cfff4b917871b2102 to before 6bdd2d70c338d52c387d3b3aadc596784ae81b01Affected
  • 8894f4919bc43f821775db2cfff4b917871b2102 to before ad8fa5bff53f5d1f8394f996850da8ce070eaee3Affected
  • 8894f4919bc43f821775db2cfff4b917871b2102 to before 24639553a016578222ac597db924dfb6fa5ec8b5Affected
  • 8894f4919bc43f821775db2cfff4b917871b2102 to before 8f3c6f08ababad2e3bdd239728cf66a9949446b4Affected
LinuxLinux
  • 3.16Affected
  • before 3.16Not affected
  • 5.10.253 through 5.10.*Not affected
  • 5.15.203 through 5.15.*Not affected
  • 6.1.167 through 6.1.*Not affected
  • 6.6.130 through 6.6.*Not affected
  • 6.12.78 through 6.12.*Not affected
  • 6.18.19 through 6.18.*Not affected
  • 6.19.9 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.