Medium 5.5Published May 6, 2026

CVE-2026-43081net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+

Updated under an hour ago (Oct 27, 2026, 9:30 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ Fix the field masks to match the hardware layout documented in downstream GSI (GSI_V3_0_EE_n_GSI_EE_GENERIC_CMD_*). Notably this fixes a WARN I was seeing when I tried to send "stop" to the MPSS remoteproc while IPA was up.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from faf0678ec8a0aa9039d8b188d012206abd67dd5c before a7d326dfb13b5a0763eccfd78836fe15199fc499; from faf0678ec8a0aa9039d8b188d012206abd67dd5c before d1c66396796f23f7201b1addf06f62515035354d; from faf0678ec8a0aa9039d8b188d012206abd67dd5c before bafc45ea30d297002750396d5f10e3018bf2cd60; from faf0678ec8a0aa9039d8b188d012206abd67dd5c before 2aa50d2c1f631b405849da246043c6f683af7489; from faf0678ec8a0aa9039d8b188d012206abd67dd5c before 9709b56d908acc120fe8b4ae250b3c9d749ea832	CNA record
linux linux_kernel linux:linux_kernel	from 6.4 before 6.6.136; from 6.7 before 6.12.83; from 6.13 before 6.18.24; from 6.19 before 6.19.14; 7.0; 7.0; 7.0; 7.0; and 3 more ranges	NVD

References

References

https://git.kernel.org/stable/c/a7d326dfb13b5a0763eccfd78836fe15199fc499	patch
https://git.kernel.org/stable/c/d1c66396796f23f7201b1addf06f62515035354d	patch
https://git.kernel.org/stable/c/bafc45ea30d297002750396d5f10e3018bf2cd60	patch
https://git.kernel.org/stable/c/2aa50d2c1f631b405849da246043c6f683af7489	patch
https://git.kernel.org/stable/c/9709b56d908acc120fe8b4ae250b3c9d749ea832	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.