First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-43367

MediumCVSS 5.5/10Last modified Nov 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amd: Fix a few more NULL pointer dereference in device cleanup

I found a few more paths that cleanup fails due to a NULL version pointer on unsupported hardware.

Add NULL checks as applicable.

(cherry picked from commit f5a05f8414fc10f307eb965f303580c7778f8dd2)

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Linux	Linux	>= fc58ef30e0a1524ce72a8e873d773ba3b0830c7d, < 38f1640db7f8bf57b9e09c5b0b8b205a598f1b3e; >= 6d7ac4a0ebb6b7bc885274aa8b2bd9971f07013c, < 5edcb0d6729b88f192ec8b0896aaf581e3593c9c; >= 39fc2bc4da0082c226cbee331f0a5d44db3997da, < 72ecb1dae72775fa9fea0159d8445d620a0a2295
Linux	Linux	>= 6.18.16, < 6.18.19; >= 6.19.6, < 6.19.9

References

Timeline

Published: May 8, 2026
Last modified: Nov 11, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-433687.8In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential overflow of shmem scatterlist length When a sc CVE-2026-433695.5In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix NULL pointer dereference in device cleanup When GPU initi CVE-2026-43378.8Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application allows a unauthenticated user to upload any type of CVE-2026-433707.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free race in VM acquire Replace non-atomic v CVE-2026-433715.5In the Linux kernel, the following vulnerability has been resolved: net: macb: Shuffle the tx ring before enabling tx Quanyang observed th CVE-2026-433725.5In the Linux kernel, the following vulnerability has been resolved: net: dsa: microchip: Fix error path in PTP IRQ setup If request_thread CVE-2026-433737.5In the Linux kernel, the following vulnerability has been resolved: net: ncsi: fix skb leak in error paths Early return paths in NCSI RX a CVE-2026-433747.8In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix percpu use-after-free in remove_nh_grp_entry When re CVE-2026-433755.5In the Linux kernel, the following vulnerability has been resolved: net: mctp: fix device leak on probe failure Driver core holds a refere CVE-2026-433769.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free by using call_rcu() for oplock_info ksmbd cu CVE-2026-433778.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: Don't log keys in SMB3 signing and encryption key generation Wh CVE-2026-433787.8In the Linux kernel, the following vulnerability has been resolved: smb: server: fix use-after-free in smb2_open() The opinfo pointer obta

CVE-2026-43367: Medium severity, CVSS 5.5 | Vulnix