CVE-2026-23063

uacce: ensure safe queue release with state management

State
Published
Severity
Not scored
Published
Feb 4, 2026
Updated
May 11, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

uacce: ensure safe queue release with state management

Directly calling `put_queue` carries risks since it cannot guarantee that resources of `uacce_queue` have been fully released beforehand. So adding a `stop_queue` operation for the UACCE_CMD_PUT_Q command and leaving the `put_queue` operation to the final resource release ensures safety.

Queue states are defined as follows: - UACCE_Q_ZOMBIE: Initial state - UACCE_Q_INIT: After opening `uacce` - UACCE_Q_STARTED: After `start` is issued via `ioctl`

When executing `poweroff -f` in virt while accelerator are still working, `uacce_fops_release` and `uacce_remove` may execute concurrently. This can cause `uacce_put_queue` within `uacce_fops_release` to access a NULL `ops` pointer. Therefore, add state checks to prevent accessing freed pointers.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 015d239ac0142ad0e26567fd890ef8d171f13709 to before b457abeb5d962db88aaf60e249402fd3073dbfabAffected
  • 015d239ac0142ad0e26567fd890ef8d171f13709 to before 8b57bf1d3b1db692f34bce694a03e41be79f6016Affected
  • 015d239ac0142ad0e26567fd890ef8d171f13709 to before 336fb41a186e7c0415ae94fec9e23d1f04b87483Affected
  • 015d239ac0142ad0e26567fd890ef8d171f13709 to before 43f233eb6e7b9d88536881a9bc43726d0e34800dAffected
  • 015d239ac0142ad0e26567fd890ef8d171f13709 to before 47634d70073890c9c37e39ab4ff93d4b585b028aAffected
  • 015d239ac0142ad0e26567fd890ef8d171f13709 to before 92e4f11e29b98ef424ff72d6371acac03e5d973cAffected
  • 015d239ac0142ad0e26567fd890ef8d171f13709 to before 26c08dabe5475d99a13f353d8dd70e518de45663Affected
LinuxLinux
  • 5.7Affected
  • before 5.7Not affected
  • 5.10.249 through 5.10.*Not affected
  • 5.15.199 through 5.15.*Not affected
  • 6.1.162 through 6.1.*Not affected
  • 6.6.122 through 6.6.*Not affected
  • 6.12.68 through 6.12.*Not affected
  • 6.18.8 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.