CVE-2026-43345net: ipa: fix event ring index not programmed for IPA v5.0+
Updated under an hour ago ()
Does this affect you?
It affects Linux and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix event ring index not programmed for IPA v5.0+ For IPA v5.0+, the event ring index field moved from CH_C_CNTXT_0 to CH_C_CNTXT_1. The v5.0 register definition intended to define this field in the CH_C_CNTXT_1 fmask array but used the old identifier of ERINDEX instead of CH_ERINDEX. Without a valid event ring, GSI channels could never signal transfer completions. This caused gsi_channel_trans_quiesce() to block forever in wait_for_completion(). At least for IPA v5.2 this resolves an issue seen where runtime suspend, system suspend, and remoteproc stop all hanged forever. It also meant the IPA data path was completely non functional.
- CVSS
- 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Analyzed
- Record last updated
- Aug 5, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from faf0678ec8a0aa9039d8b188d012206abd67dd5c before ae8343a19ccb051d519dbb3a9082ddea9f0551d3; from faf0678ec8a0aa9039d8b188d012206abd67dd5c before 2bf18b643c4656413f7cfd5615af60a6b4e261da; from faf0678ec8a0aa9039d8b188d012206abd67dd5c before 2d2dc166d55148cfcf8ae67b415f8d6d110e6fca; from faf0678ec8a0aa9039d8b188d012206abd67dd5c before 34c988bb04cbdf093d2134e179433da49ffcd044; from faf0678ec8a0aa9039d8b188d012206abd67dd5c before 56007972c0b1e783ca714d6f1f4d6e66e531d21f | CNA record |
linux linux_kernel linux:linux_kernel | from 6.4 before 6.6.136; from 6.7 before 6.12.83; from 6.13 before 6.18.24; from 6.19 before 6.19.14; 7.0; 7.0; 7.0; 7.0; and 3 more ranges | NVD |
References
- https://git.kernel.org/stable/c/ae8343a19ccb051d519dbb3a9082ddea9f0551d3patch
- https://git.kernel.org/stable/c/2bf18b643c4656413f7cfd5615af60a6b4e261dapatch
- https://git.kernel.org/stable/c/2d2dc166d55148cfcf8ae67b415f8d6d110e6fcapatch
- https://git.kernel.org/stable/c/34c988bb04cbdf093d2134e179433da49ffcd044patch
- https://git.kernel.org/stable/c/56007972c0b1e783ca714d6f1f4d6e66e531d21fpatch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.