NULL Pointer Dereference Vulnerability in AMD Linux GPU Driver
CVE-2026-43603

6.9MEDIUM

Key Information:

Vendor

Amd
Status
Amd Ryzen™ 4000 Series Mobile Processors With Radeon™ Graphics
Amd Ryzen™ 7035 Series Processors With Radeon™ Graphics
Amd Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics
Amd Ryzen™ 7040 Series Mobile Processors With Radeon™ Graphics
Vendor
CVE Published:
3 November 2026

What is CVE-2026-43603?

A vulnerability in the AMD Linux GPU driver has been identified, where a NULL pointer dereference could lead to a kernel crash. This issue poses a risk of denial of service, potentially impacting system availability. Users of the affected driver are encouraged to apply the latest security updates to mitigate this risk and maintain system stability.

Affected Version(s)

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics Radeon Software for Linux 26.13

AMD EPYC™ 4004 Series Processors Radeon Software for Linux 26.13

AMD EPYC™ 4005 Series Processors Radeon Software for Linux 26.13

References

https://www.amd.com/en/resources/product-security/bulleti...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.