PT-2026-39107 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-21 · CVE-2026-43446

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A deadlock occurs during the runtime suspend process in the accel/amdxdna component when a job is pending. The runtime suspend callback attempts to drain the running job workqueue before suspending the device. If a job is executing and calls the pm runtime resume and get() function, it can conflict with the runtime suspend path, leading to a system deadlock.

Recommendations Move the pm runtime resume and get() function from the job execution routine to the job submission routine to ensure the device is resumed before the job is queued.

Fix

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

CVE-2026-43446

Affected Products

Linux Kernel

References · 12

• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43446 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43446 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43446 · Security Note
• https://git.kernel.org/stable/c/ac72e7385a2c7533dd766de4197134d96230be85 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43446 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-43446 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43446 · Security Note
• https://git.kernel.org/stable/c/6b13cb8f48a42ddf6dd98865b673a82e37ff238b · Patch
• https://twitter.com/CVEnew/status/2052767621603565914 · Twitter Post
• https://git.kernel.org/linus/6b13cb8f48a42ddf6dd98865b673a82e37ff238b · Note
• https://t.me/cveNotify/164411 · Telegram Post
• https://twitter.com/hetmehtaa/status/2055151398283837677 · Twitter Post