CVE-2026-43345
published 2026-05-08CVE-2026-43345: In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix event ring index not programmed for IPA v5.0+ For IPA v5.0+, the event ring…
PriorityP340high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.35%
27.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: ipa: fix event ring index not programmed for IPA v5.0+
For IPA v5.0+, the event ring index field moved from CH_C_CNTXT_0 to
CH_C_CNTXT_1. The v5.0 register definition intended to define this
field in the CH_C_CNTXT_1 fmask array but used the old identifier of
ERINDEX instead of CH_ERINDEX.
Without a valid event ring, GSI channels could never signal transfer
completions. This caused gsi_channel_trans_quiesce() to block
forever in wait_for_completion().
At least for IPA v5.2 this resolves an issue seen where runtime
suspend, system suspend, and remoteproc stop all hanged forever. It
also meant the IPA data path was completely non functional.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| linux | linux | — | — |
| linux | linux | >= faf0678ec8a0aa9039d8b188d012206abd67dd5c < ae8343a19ccb051d519dbb3a9082ddea9f0551d3 | ae8343a19ccb051d519dbb3a9082ddea9f0551d3 |
| linux | linux | >= faf0678ec8a0aa9039d8b188d012206abd67dd5c < 2bf18b643c4656413f7cfd5615af60a6b4e261da | 2bf18b643c4656413f7cfd5615af60a6b4e261da |
| linux | linux | >= faf0678ec8a0aa9039d8b188d012206abd67dd5c < 2d2dc166d55148cfcf8ae67b415f8d6d110e6fca | 2d2dc166d55148cfcf8ae67b415f8d6d110e6fca |
| linux | linux | >= faf0678ec8a0aa9039d8b188d012206abd67dd5c < 34c988bb04cbdf093d2134e179433da49ffcd044 | 34c988bb04cbdf093d2134e179433da49ffcd044 |
| linux | linux | >= faf0678ec8a0aa9039d8b188d012206abd67dd5c < 56007972c0b1e783ca714d6f1f4d6e66e531d21f | 56007972c0b1e783ca714d6f1f4d6e66e531d21f |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 6.13 < 6.18.24 | 6.18.24 |
| linux | linux_kernel | >= 6.19 < 6.19.14 | 6.19.14 |
| linux | linux_kernel | >= 6.4 < 6.6.136 | 6.6.136 |
| linux | linux_kernel | >= 6.7 < 6.12.83 | 6.12.83 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: net: ipa: fix event ring index not programmed for IPA v5.0+
vendor_redhat·2026-05-08·CVSS 5.5
CVE-2026-43345 [MEDIUM] CWE-1285 kernel: net: ipa: fix event ring index not programmed for IPA v5.0+
kernel: net: ipa: fix event ring index not programmed for IPA v5.0+
A flaw was found in the Linux kernel's ipa driver. This vulnerability, affecting IPA version 5.0 and later, stems from an incorrect event ring index programming, preventing GSI channels from signaling transfer completions. As a result, the system can experience hangs during operations such as runtime suspend, system suspend, and remoteproc stop. This leads to a Denial of Service (DoS), rendering the IPA data path completely non-functional.
Package: kernel (Red Hat Enterprise Linux 10) - Fix deferred
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Li
VulDB
Linux Kernel up to 6.6.135/6.12.82/6.18.23/6.19.13 net gsi_channel_trans_quiesce privilege escalation (Nessus ID 313453 / WID-SEC-2026-1454)
vuldb·2026-06-19·CVSS 7.5
CVE-2026-43345 [HIGH] Linux Kernel up to 6.6.135/6.12.82/6.18.23/6.19.13 net gsi_channel_trans_quiesce privilege escalation (Nessus ID 313453 / WID-SEC-2026-1454)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.6.135/6.12.82/6.18.23/6.19.13. This affects the function gsi_channel_trans_quiesce of the component net. The manipulation leads to privilege escalation.
This vulnerability is documented as CVE-2026-43345. The attack requires being on the local network. There is not any exploit available.
It is advisable to upgrade the affected component.
GHSA
GHSA-7657-q549-6g59: In the Linux kernel, the following vulnerability has been resolved:
net: ipa: fix event ring index not programmed for IPA v5
ghsa_unreviewed·2026-05-08
CVE-2026-43345 GHSA-7657-q549-6g59: In the Linux kernel, the following vulnerability has been resolved:
net: ipa: fix event ring index not programmed for IPA v5
In the Linux kernel, the following vulnerability has been resolved:
net: ipa: fix event ring index not programmed for IPA v5.0+
For IPA v5.0+, the event ring index field moved from CH_C_CNTXT_0 to
CH_C_CNTXT_1. The v5.0 register definition intended to define this
field in the CH_C_CNTXT_1 fmask array but used the old identifier of
ERINDEX instead of CH_ERINDEX.
Without a valid event ring, GSI channels could never signal transfer
completions. This caused gsi_channel_trans_quiesce() to block
forever in wait_for_completion().
At least for IPA v5.2 this resolves an issue seen where runtime
suspend, system suspend, and remoteproc stop all hanged forever. It
also meant the IPA data path was completely non functional.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/2bf18b643c4656413f7cfd5615af60a6b4e261dahttps://git.kernel.org/stable/c/2d2dc166d55148cfcf8ae67b415f8d6d110e6fcahttps://git.kernel.org/stable/c/34c988bb04cbdf093d2134e179433da49ffcd044https://git.kernel.org/stable/c/56007972c0b1e783ca714d6f1f4d6e66e531d21fhttps://git.kernel.org/stable/c/ae8343a19ccb051d519dbb3a9082ddea9f0551d3
2026-05-08
Published