Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2026-43345— net: ipa: fix event ring index not programmed for IPA v5.0+

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-43345

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
net: ipa: fix event ring index not programmed for IPA v5.0+
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix event ring index not programmed for IPA v5.0+ For IPA v5.0+, the event ring index field moved from CH_C_CNTXT_0 to CH_C_CNTXT_1. The v5.0 register definition intended to define this field in the CH_C_CNTXT_1 fmask array but used the old identifier of ERINDEX instead of CH_ERINDEX. Without a valid event ring, GSI channels could never signal transfer completions. This caused gsi_channel_trans_quiesce() to block forever in wait_for_completion(). At least for IPA v5.2 this resolves an issue seen where runtime suspend, system suspend, and remoteproc stop all hanged forever. It also meant the IPA data path was completely non functional.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux faf0678ec8a0aa9039d8b188d012206abd67dd5c ~ ae8343a19ccb051d519dbb3a9082ddea9f0551d3 -
LinuxLinux 6.4 -

II. Public POCs for CVE-2026-43345

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-43345

Please Login to view more intelligence information

Same Patch Batch · Linux · 2026-05-08 · 199 CVEs total

CVE-2026-43337drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw()
CVE-2026-43350smb: client: require a full NFS mode SID before reading mode bits
CVE-2026-43349f2fs: fix to avoid uninit-value access in f2fs_sanity_check_node_footer
CVE-2026-43348mshv_vtl: Fix vmemmap_shift exceeding MAX_FOLIO_ORDER
CVE-2026-43347arm64: dts: qcom: monaco: Reserve full Gunyah metadata region
CVE-2026-43346ice: ptp: don't WARN when controlling PF is unavailable
CVE-2026-43344perf/x86/intel/uncore: Fix die ID init and look up bugs
CVE-2026-43343usb: gadget: f_subset: Fix unbalanced refcnt in geth_free
CVE-2026-43342usb: gadget: f_rndis: Protect RNDIS options with mutex
CVE-2026-43340comedi: Reinit dev->spinlock between attachments to low-level drivers
CVE-2026-43341net/ipv6: ioam6: prevent schema length wraparound in trace fill
CVE-2026-43339ipv6: prevent possible UaF in addrconf_permanent_addr()
CVE-2026-43338btrfs: reserve enough transaction items for qgroup ioctls
CVE-2026-43331x86/kexec: Disable KCOV instrumentation after load_segments()
CVE-2026-43325wifi: iwlwifi: mvm: don't send a 6E related command when not supported
CVE-2026-43327USB: dummy-hcd: Fix locking/synchronization error
CVE-2026-43329netfilter: flowtable: strictly check for maximum number of actions
CVE-2026-43328cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path
CVE-2026-43330crypto: caam - fix overflow on long hmac keys
CVE-2026-43334Bluetooth: SMP: force responder MITM requirements before building the pairing response

Showing top 20 of 199 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-43345

No comments yet

Leave a comment