CVE-2026-43603Medium· 6.9▾ SunlitA NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 38 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service.
ryzen_4000_series_mobile_processors_with_radeon_graphics (all versions)ryzen_7035_series_processors_with_radeon_graphics (all versions)athlon_3000_series_mobile_processors_with_radeon_graphics (all versions)ryzen_7040_series_mobile_processors_with_radeon_graphics (all versions)ryzen_7020_series_processors_with_radeon_graphics (all versions)ryzen_7045_series_mobile_processors_with_radeon_graphics (all versions)ryzen_7000_series_desktop_processors (all versions)ryzen_7030_series_mobile_processors_with_radeon_graphics (all versions)ryzen_9000hx_series_processors (all versions)ryzen_ai_300_series_processors (all versions)ryzen_8000_series_desktop_processors (all versions)ryzen_9000_series_desktop_processors (all versions)ryzen_5000_series_mobile_processors_with_radeon_graphics (all versions)ryzen_4000_series_desktop_processors (all versions)ryzen_5000_series_desktop_processors_with_radeon_graphics (all versions)ryzen_8040_series_mobile_processors_with_radeon_graphics (all versions)ryzen_6000_series_processors_with_radeon_graphics (all versions)ryzen_ai_max_300_series_processors (all versions)ryzen_ai_max_400_series_processors (all versions)ryzen_ai_400_series_processors (all versions)radeon_rx_9000_series_graphics_products (all versions)radeon_ai_pro_r9000_series_graphics_products (all versions)radeon_rx_7000_series_graphics_products (all versions)radeon_pro_w7000_series_graphics_products (all versions)radeon_pro_w6000_series_graphics_products (all versions)radeon_rx_6000_series_graphics_products (all versions)radeon_pro_w5000_series_graphics_products (all versions)radeon_rx_5000_series_graphics_products (all versions)instinct_mi210 (all versions)instinct_mi250 (all versions)instinct_mi300a (all versions)instinct_mi300x (all versions)instinct_mi325x (all versions)instinct_mi350x (all versions)instinct_mi355x (all versions)instinct_mi308x (all versions)instinct_mi250x (all versions)radeon_pro_v710 (all versions)radeon_pro_v620 (all versions)epyc_4005_series_processors (all versions)epyc_4004_series_processors (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2023-31322High· 8.7Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and Serviceability trusted application (RAS TA) potentially leading to a read or write to shared memory resulting in loss of…
CVE-2026-40652Medium· 5.2An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted Truevision Advanced Raster Graphics Adapter (TGA) file to a user or an automated pipeline, potentially …
CVE-2026-100493Medium· 6.9An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS file that causes an undersized heap allocation and a subsequent out-of-bounds read, potentially resulting in process t…
CVE-2026-40661Medium· 5.2An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted DirectDraw Surface (DDS) file to a user or an automated pipeline, potentially resulting in heap …
CVE-2026-40660Medium· 5.2A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could allow an attacker with local access to read out-of-bounds heap memory, potentially resulting in information disclosure or application crash.
CVE-2026-40659Medium· 5.1An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted DirectDraw Surface (DDS) file, potentially resulting in denial of service (DoS).