GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-43311 (GCVE-0-2026-43311)

Vulnerability from cvelistv5 – Published: 2026-05-08 13:11 – Updated: 2026-06-19 11:58
VLAI
Title
soc/tegra: pmc: Fix unsafe generic_handle_irq() call
Summary
In the Linux kernel, the following vulnerability has been resolved: soc/tegra: pmc: Fix unsafe generic_handle_irq() call Currently, when resuming from system suspend on Tegra platforms, the following warning is observed: WARNING: CPU: 0 PID: 14459 at kernel/irq/irqdesc.c:666 Call trace: handle_irq_desc+0x20/0x58 (P) tegra186_pmc_wake_syscore_resume+0xe4/0x15c syscore_resume+0x3c/0xb8 suspend_devices_and_enter+0x510/0x540 pm_suspend+0x16c/0x1d8 The warning occurs because generic_handle_irq() is being called from a non-interrupt context which is considered as unsafe. Fix this warning by deferring generic_handle_irq() call to an IRQ work which gets executed in hard IRQ context where generic_handle_irq() can be called safely. When PREEMPT_RT kernels are used, regular IRQ work (initialized with init_irq_work) is deferred to run in per-CPU kthreads in preemptible context rather than hard IRQ context. Hence, use the IRQ_WORK_INIT_HARD variant so that with PREEMPT_RT kernels, the IRQ work is processed in hardirq context instead of being deferred to a thread which is required for calling generic_handle_irq(). On non-PREEMPT_RT kernels, both init_irq_work() and IRQ_WORK_INIT_HARD() execute in IRQ context, so this change has no functional impact for standard kernel configurations. [treding@nvidia.com: miscellaneous cleanups]
Severity
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 0474cc8489bda9a8cd6a10252e7e6af29c849438 , < d1c9c79eb06ed7c4e0a090ba5b1d4e475f7d0681 (git)
Affected: 0474cc8489bda9a8cd6a10252e7e6af29c849438 , < 64016227dcdb968b7030eda04304f3d0df5d209d (git)
Affected: 0474cc8489bda9a8cd6a10252e7e6af29c849438 , < e6d96073af681780820c94079b978474a8a44413 (git)
guessed Create a notification for this product.
Linux Linux Affected: 6.2
Unaffected: 0 , < 6.2 (semver)
Unaffected: 6.6.143 , ≤ 6.6.* (semver)
Unaffected: 6.19.6 , ≤ 6.19.* (semver)
Unaffected: 7.0 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/soc/tegra/pmc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "d1c9c79eb06ed7c4e0a090ba5b1d4e475f7d0681",
              "status": "affected",
              "version": "0474cc8489bda9a8cd6a10252e7e6af29c849438",
              "versionType": "git"
            },
            {
              "lessThan": "64016227dcdb968b7030eda04304f3d0df5d209d",
              "status": "affected",
              "version": "0474cc8489bda9a8cd6a10252e7e6af29c849438",
              "versionType": "git"
            },
            {
              "lessThan": "e6d96073af681780820c94079b978474a8a44413",
              "status": "affected",
              "version": "0474cc8489bda9a8cd6a10252e7e6af29c849438",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/soc/tegra/pmc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.2"
            },
            {
              "lessThan": "6.2",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.143",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.143",
                  "versionStartIncluding": "6.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.6",
                  "versionStartIncluding": "6.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "6.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc/tegra: pmc: Fix unsafe generic_handle_irq() call\n\nCurrently, when resuming from system suspend on Tegra platforms,\nthe following warning is observed:\n\nWARNING: CPU: 0 PID: 14459 at kernel/irq/irqdesc.c:666\nCall trace:\n handle_irq_desc+0x20/0x58 (P)\n tegra186_pmc_wake_syscore_resume+0xe4/0x15c\n syscore_resume+0x3c/0xb8\n suspend_devices_and_enter+0x510/0x540\n pm_suspend+0x16c/0x1d8\n\nThe warning occurs because generic_handle_irq() is being called from\na non-interrupt context which is considered as unsafe.\n\nFix this warning by deferring generic_handle_irq() call to an IRQ work\nwhich gets executed in hard IRQ context where generic_handle_irq()\ncan be called safely.\n\nWhen PREEMPT_RT kernels are used, regular IRQ work (initialized with\ninit_irq_work) is deferred to run in per-CPU kthreads in preemptible\ncontext rather than hard IRQ context. Hence, use the IRQ_WORK_INIT_HARD\nvariant so that with PREEMPT_RT kernels, the IRQ work is processed in\nhardirq context instead of being deferred to a thread which is required\nfor calling generic_handle_irq().\n\nOn non-PREEMPT_RT kernels, both init_irq_work() and IRQ_WORK_INIT_HARD()\nexecute in IRQ context, so this change has no functional impact for\nstandard kernel configurations.\n\n[treding@nvidia.com: miscellaneous cleanups]"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-19T11:58:27.490Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/d1c9c79eb06ed7c4e0a090ba5b1d4e475f7d0681"
        },
        {
          "url": "https://git.kernel.org/stable/c/64016227dcdb968b7030eda04304f3d0df5d209d"
        },
        {
          "url": "https://git.kernel.org/stable/c/e6d96073af681780820c94079b978474a8a44413"
        }
      ],
      "title": "soc/tegra: pmc: Fix unsafe generic_handle_irq() call",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-43311",
    "datePublished": "2026-05-08T13:11:29.068Z",
    "dateReserved": "2026-05-01T14:12:56.001Z",
    "dateUpdated": "2026-06-19T11:58:27.490Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-43311",
      "date": "2026-09-16",
      "epss": "0.00121",
      "percentile": "0.02182"
    },
    "microsoft_vex": {
      "current_release_date": "2026-07-02T14:44:01.000Z",
      "cve": "CVE-2026-43311",
      "id": "msrc_CVE-2026-43311",
      "initial_release_date": "2026-05-02T00:00:00.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "5",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "soc/tegra: pmc: Fix unsafe generic_handle_irq() call",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-43311.json",
      "version": "6"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-43311\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-05-08T14:16:39.480\",\"lastModified\":\"2026-06-19T13:16:29.553\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nsoc/tegra: pmc: Fix unsafe generic_handle_irq() call\\n\\nCurrently, when resuming from system suspend on Tegra platforms,\\nthe following warning is observed:\\n\\nWARNING: CPU: 0 PID: 14459 at kernel/irq/irqdesc.c:666\\nCall trace:\\n handle_irq_desc+0x20/0x58 (P)\\n tegra186_pmc_wake_syscore_resume+0xe4/0x15c\\n syscore_resume+0x3c/0xb8\\n suspend_devices_and_enter+0x510/0x540\\n pm_suspend+0x16c/0x1d8\\n\\nThe warning occurs because generic_handle_irq() is being called from\\na non-interrupt context which is considered as unsafe.\\n\\nFix this warning by deferring generic_handle_irq() call to an IRQ work\\nwhich gets executed in hard IRQ context where generic_handle_irq()\\ncan be called safely.\\n\\nWhen PREEMPT_RT kernels are used, regular IRQ work (initialized with\\ninit_irq_work) is deferred to run in per-CPU kthreads in preemptible\\ncontext rather than hard IRQ context. Hence, use the IRQ_WORK_INIT_HARD\\nvariant so that with PREEMPT_RT kernels, the IRQ work is processed in\\nhardirq context instead of being deferred to a thread which is required\\nfor calling generic_handle_irq().\\n\\nOn non-PREEMPT_RT kernels, both init_irq_work() and IRQ_WORK_INIT_HARD()\\nexecute in IRQ context, so this change has no functional impact for\\nstandard kernel configurations.\\n\\n[treding@nvidia.com: miscellaneous cleanups]\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/soc/tegra/pmc.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"0474cc8489bda9a8cd6a10252e7e6af29c849438\",\"lessThan\":\"d1c9c79eb06ed7c4e0a090ba5b1d4e475f7d0681\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0474cc8489bda9a8cd6a10252e7e6af29c849438\",\"lessThan\":\"64016227dcdb968b7030eda04304f3d0df5d209d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"0474cc8489bda9a8cd6a10252e7e6af29c849438\",\"lessThan\":\"e6d96073af681780820c94079b978474a8a44413\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/soc/tegra/pmc.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.2\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.2\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.143\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.19.6\",\"lessThanOrEqual\":\"6.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.0\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.19.6\",\"matchCriteriaId\":\"02662113-2CE6-417D-941C-D5D307C2F671\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/64016227dcdb968b7030eda04304f3d0df5d209d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d1c9c79eb06ed7c4e0a090ba5b1d4e475f7d0681\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/e6d96073af681780820c94079b978474a8a44413\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-07-02T19:45:51+00:00",
      "cve": "CVE-2026-43311",
      "id": "CVE-2026-43311",
      "initial_release_date": "2026-05-08T00:00:00+00:00",
      "product_status:known_affected": "184",
      "product_status:known_not_affected": "90",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: soc/tegra: pmc: Fix unsafe generic_handle_irq() call",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43311.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-15T02:06:27Z",
      "cve": "CVE-2026-43311",
      "id": "CVE-2026-43311",
      "initial_release_date": "2026-05-13T03:35:33Z",
      "product_status:known_affected": "108",
      "product_status:known_not_affected": "279",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-43311",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-43311.json",
      "version": "4"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.