CVE-2026-43345 Linux kernel CVE debrief

Who should care

Linux kernel maintainers and distributors, especially teams shipping IPA-enabled embedded or mobile platforms using IPA v5.0+ code paths. Operators should pay attention if systems rely on suspend/resume, remoteproc control, or any workflow that quiesces GSI channels.

Technical summary

The CVE description says the event ring index field moved from CH_C_CNTXT_0 to CH_C_CNTXT_1 in IPA v5.0+. The v5.0 register definition used the old identifier ERINDEX instead of CH_ERINDEX in the CH_C_CNTXT_1 fmask array. As a result, no valid event ring was programmed for GSI channels, transfer completions were never signaled, and gsi_channel_trans_quiesce() could block indefinitely in wait_for_completion(). The NVD record assigns CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Defensive priority

High

Recommended defensive actions

• Apply the upstream/stable Linux kernel fix referenced by the kernel.org stable commit links in the CVE record.
• Prioritize deployment on systems using IPA v5.0+ paths, especially where suspend/resume, remoteproc, or IPA data-path quiesce operations are exercised.
• Validate that the kernel build includes the corrected CH_ERINDEX programming for the event ring index field.
• Monitor devices for indefinite hangs during runtime suspend, system suspend, or remoteproc stop, and treat repeated stalls as a kernel regression until patched.
• If immediate patching is not possible, reduce exposure by avoiding affected IPA/GSI quiesce paths where operationally feasible.

Evidence notes

This debrief is based on the CVE description, the NVD record, and the CVE metadata provided in the source corpus. The supplied CVE description explicitly states the CH_C_CNTXT_1 field mapping error, the resulting lack of a valid event ring, and the observed hang behavior. The NVD metadata supplies the CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H and a 2026-05-08 publication time with a 2026-05-11 modification time. No additional claims were taken from the linked kernel.org commits beyond their presence as remediation references.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.