CVE-2026-23341accel/amdxdna: Fix crash when destroying a suspended hardware context
Updated under an hour ago ()
Does this affect you?
It affects Linux and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix crash when destroying a suspended hardware context If userspace issues an ioctl to destroy a hardware context that has already been automatically suspended, the driver may crash because the mailbox channel pointer is NULL for the suspended context. Fix this by checking the mailbox channel pointer in aie2_destroy_context() before accessing it.
- CVSS
- 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from b569ff8a1bc1bcd4fdc6fd334604a654f61237a1 before 2d2c32b1b9e32f25214f0cbc818c4d55f7da1d0e; from 2611c9616cb52d3ed54a6095d72d18e645a6955a before a6317704edab95d66a62fc1861d9546284ab678e; from 97f27573837ef96b4ba42af463cc800cab615c0e before 8363c02863332992a1822688da41f881d88d1631 | CNA record |
linux linux_kernel linux:linux_kernel | from 6.19.4 before 6.19.7 | NVD |
References
- https://git.kernel.org/stable/c/2d2c32b1b9e32f25214f0cbc818c4d55f7da1d0e
- https://git.kernel.org/stable/c/a6317704edab95d66a62fc1861d9546284ab678epatch
- https://git.kernel.org/stable/c/8363c02863332992a1822688da41f881d88d1631patch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.