PT-2026-40684 · Git+4 · Kernel+108

Published 2026-05-13 · Updated 2026-06-26 · CVE-2026-43477

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the drm/i915/vrr component where writing to TRANS VRR VMAX or FLIPLINE before enabling TRANS DDI FUNC CTL can cause a system hang with a Machine Check Exception (MCE) on ICL hardware. This was observed during failed link training with external displays. The problem occurs because Variable Refresh Rate (VRR) timings must be configured after the Digital Display Interface (DDI) is enabled via TRANS DDI FUNC CTL to align with hardware specifications and DMC firmware behavior.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-43477

Affected Products

Kernel

Linux

Linux-Allwinner-5.19

Linux-Aws

Linux-Aws-5.0

Linux-Aws-5.11

Linux-Aws-5.13

Linux-Aws-5.19

Linux-Aws-5.3

Linux-Aws-5.8

Linux-Aws-6.14

Linux-Aws-6.17

Linux-Aws-6.2

Linux-Aws-6.5

Linux-Azure

Linux-Azure-5.11

Linux-Azure-5.13

Linux-Azure-5.19

Linux-Azure-5.3

Linux-Azure-5.8

Linux-Azure-6.11

Linux-Azure-6.17

Linux-Azure-6.2

Linux-Azure-6.5

Linux-Azure-Edge

Linux-Azure-Fde

Linux-Azure-Fde-5.19

Linux-Azure-Fde-6.17

Linux-Azure-Fde-6.2

Linux-Bluefield

Linux-Gcp

Linux-Gcp-5.11

Linux-Gcp-5.13

Linux-Gcp-5.19

Linux-Gcp-5.3

Linux-Gcp-5.8

Linux-Gcp-6.11

Linux-Gcp-6.14

Linux-Gcp-6.17

Linux-Gcp-6.2

Linux-Gcp-6.5

Linux-Gke

Linux-Gke-4.15

Linux-Gkeop-5.15

Linux-Gke-5.4

Linux-Gkeop

Linux-Hwe

Linux-Hwe-5.11

Linux-Hwe-5.13

Linux-Hwe-5.19

Linux-Hwe-5.8

Linux-Hwe-6.11

Linux-Hwe-6.14

Linux-Hwe-6.17

Linux-Hwe-6.2

Linux-Hwe-6.5

Linux-Hwe-Edge

Linux-Intel-5.13

Linux-Intel-Iot-Realtime

Linux-Lowlatency-Hwe-5.19

Linux-Lowlatency-Hwe-6.11

Linux-Lowlatency-Hwe-6.2

Linux-Lowlatency-Hwe-6.5

Linux-Lts

Linux-Nvidia-6.11

Linux-Nvidia-6.17

Linux-Nvidia-6.2

Linux-Nvidia-6.5

Linux-Nvidia-7.0

Linux-Nvidia-Bos

Linux-Oem

Linux-Oem-5.10

Linux-Oem-5.13

Linux-Oem-5.14

Linux-Oem-5.17

Linux-Oem-5.6

Linux-Oem-6.0

Linux-Oem-6.1

Linux-Oem-6.11

Linux-Oem-6.14

Linux-Oem-6.17

Linux-Oem-6.5

Linux-Oem-6.8

Linux-Oracle

Linux-Oracle-5.0

Linux-Oracle-5.11

Linux-Oracle-5.13

Linux-Oracle-5.3

Linux-Oracle-5.8

Linux-Oracle-6.14

Linux-Oracle-6.17

Linux-Oracle-6.5

Linux-Raspi

Linux-Raspi-Realtime

Linux-Raspi2

Linux-Realtime

Linux-Realtime-6.14

Linux-Realtime-6.17

Linux-Riscv

Linux-Riscv-5.11

Linux-Riscv-5.19

Linux-Riscv-5.8

Linux-Riscv-6.14

Linux-Riscv-6.17

Linux-Riscv-6.5

Linux-Starfive-5.19

Linux-Starfive-6.2

Linux-Starfive-6.5

Linux Kernel

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43477.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-43477 · Security Note
• https://git.kernel.org/stable/c/bf9e3b6ffd76da38dd4961c65d80571b25bf10a5 · Patch
• https://osv.dev/vulnerability/CVE-2026-43477 · Vendor Advisory
• https://git.kernel.org/stable/c/237aab549676288d9255bb8dcc284738e56eaa31 · Patch
• https://cve.org/CVERecord?id=CVE-2026-43477 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43477 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43477 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43477 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-43477 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-43477 · Vendor Advisory
• https://git.kernel.org/stable/c/8a7d29b8bda144d44e61df1b2705b1d4378f4e44 · Patch
• https://git.kernel.org/linus/237aab549676288d9255bb8dcc284738e56eaa31 · Note
• https://t.me/cveNotify/164620 · Telegram Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note