Medium 5.5Published May 13, 2026

CVE-2026-43485nouveau/gsp: drop WARN_ON in ACPI probes

Updated under an hour ago (Oct 27, 2026, 10:23 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: nouveau/gsp: drop WARN_ON in ACPI probes These WARN_ONs seem to trigger a lot, and we don't seem to have a plan to fix them, so just drop them, as they are most likely harmless.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	176fdcbddfd288408ce8571c1760ad618d962096 builds before 2bbb55c4e6665e35a2ebb856d393802753017b2d; from 176fdcbddfd288408ce8571c1760ad618d962096 before 214b6bde0e941a34ba877cf2f26f85d62fb5d598; from 176fdcbddfd288408ce8571c1760ad618d962096 before d1c991c860496d97044802ea54b30f20db468c1d; from 176fdcbddfd288408ce8571c1760ad618d962096 before 9478c166c46934160135e197b049b5a05753f2ad	CNA record
linux linux_kernel linux:linux_kernel	from 6.7 before 6.18.19; from 6.19 before 6.19.9; 7.0	NVD

References

References

https://git.kernel.org/stable/c/2bbb55c4e6665e35a2ebb856d393802753017b2d
https://git.kernel.org/stable/c/214b6bde0e941a34ba877cf2f26f85d62fb5d598	patch
https://git.kernel.org/stable/c/d1c991c860496d97044802ea54b30f20db468c1d	patch
https://git.kernel.org/stable/c/9478c166c46934160135e197b049b5a05753f2ad	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.