CVE-2026-43220

🗓️ 06 May 2026 11:28:20Reported by LinuxType

cve🔗 web.nvd.nist.gov👁 42 Views🌐 WEB

Iommu amd serialize sequence allocation during invalidations; move semaphore value under lock.

Reporter	Title	Published	Views	Family All 33
ATTACKERKB	CVE-2026-43220	6 May 202611:28	–	attackerkb
AstraLinux	Astra Linux – Vulnerability in Linux 5.10	20 May 202605:53	–	astralinux
CBLMariner	CVE-2026-43220 affecting package kernel for versions less than 6.6.141.1-1	22 Jun 202621:21	–	cbl_mariner
Chainguard	CVE-2026-43220 vulnerabilities	14 May 202601:18	–	cgr
Circl	CVE-2026-43220	22 May 202613:05	–	circl
CNNVD	Linux kernel 安全漏洞	6 May 202600:00	–	cnnvd
Cvelist	CVE-2026-43220 iommu/amd: serialize sequence allocation under concurrent TLB invalidations	6 May 202611:28	–	cvelist
Debian	[SECURITY] [DSA 6274-1] linux security update	15 May 202617:53	–	debian
Debian CVE	CVE-2026-43220	6 May 202611:28	–	debiancve
Tenable Nessus	Debian dsa-6274 : ata-modules-6.12.74+deb13+1-armmp-di - security update	15 May 202600:00	–	nessus

NVD

Vulners

CNA

Node

linux linux_kernelRange6.6.128–6.7

linux linux_kernelRange6.12.75–6.13

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/iommu/amd/amd_iommu_types.h",
      "drivers/iommu/amd/init.c",
      "drivers/iommu/amd/iommu.c"
    ],
    "versions": [
      {
        "version": "f2f65b28d802a667119147444ec2ae33eebf9a58",
        "lessThan": "d51bf43193b1e95dc4e34e540dc76e19def2ae5a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "715c263119fd1b918a9fcbd8a36ea5b604a46324",
        "lessThan": "fca7aa0264ae99e5ff287d0ced5af0b82b121c4f",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "e15768e68820142077bbca402d8e902f64ade1b0",
        "lessThan": "5000ce7fcb31067566a1a1a2e5b5bbff93625242",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "496269d12072ecb219826485bdbec70c92a8eef5",
        "lessThan": "48caa7542a795c9679ec1bd1bc2592e05a7369a4",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d2a0cac10597068567d336e85fa3cbdbe8ca62bf",
        "lessThan": "9e249c48412828e807afddc21527eb734dc9bd3d",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/iommu/amd/amd_iommu_types.h",
      "drivers/iommu/amd/init.c",
      "drivers/iommu/amd/iommu.c"
    ],
    "versions": [
      {
        "version": "6.6.128",
        "lessThan": "6.6.140",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "6.12.75",
        "lessThan": "6.12.88",
        "status": "affected",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/5000ce7fcb31067566a1a1a2e5b5bbff93625242
git	www.git.kernel.org/stable/c/9e249c48412828e807afddc21527eb734dc9bd3d
git	www.git.kernel.org/stable/c/fca7aa0264ae99e5ff287d0ced5af0b82b121c4f
git	www.git.kernel.org/stable/c/48caa7542a795c9679ec1bd1bc2592e05a7369a4
git	www.git.kernel.org/stable/c/d51bf43193b1e95dc4e34e540dc76e19def2ae5a

Parameter	Position	Path	Description	CWE
author	request body	localhost:3000/write	SQL injection via __raw payload in MikroORM using a Custom Type column exposed by the /write endpoint	CWE-89
title	request body	localhost:3000/write	SQL injection via __raw payload in MikroORM using a Custom Type column exposed by the /write endpoint	CWE-89
content.__raw	request body	localhost:3000/write	SQL injection via __raw payload in MikroORM using a Custom Type column exposed by the /write endpoint	CWE-89
content.sql	request body	localhost:3000/write	SQL injection via __raw payload in MikroORM using a Custom Type column exposed by the /write endpoint	CWE-89
content	request body	localhost:3000/write	SQL injection via __raw payload in MikroORM using a Custom Type column exposed by the /write endpoint	CWE-89
title	request body	localhost:3000/write	SQL injection via __raw payload in MikroORM using a Custom Type column exposed by the /write endpoint	CWE-89
author	request body	localhost:3000/write	SQL injection via __raw payload in MikroORM using a Custom Type column exposed by the /write endpoint	CWE-89
content	request body	localhost:3000/write	SQL injection via __raw payload in MikroORM using a Custom Type column exposed by the /write endpoint	CWE-89
__raw	request body	localhost:3000/write	SQL injection via __raw payload in MikroORM using a Custom Type column exposed by the /write endpoint	CWE-89
sql	request body	localhost:3000/write	SQL injection via __raw payload in MikroORM using a Custom Type column exposed by the /write endpoint	CWE-89

17 Jun 2026 10:49Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.15.5

EPSS0.00127