Riskcovery

CVE-2026-23328

accel/amdxdna: Fix NULL pointer dereference of mgmt_chann

State
Published
Severity
Not scored
Published
Mar 25, 2026
Updated
Oct 15, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

accel/amdxdna: Fix NULL pointer dereference of mgmt_chann

mgmt_chann may be set to NULL if the firmware returns an unexpected error in aie2_send_mgmt_msg_wait(). This can later lead to a NULL pointer dereference in aie2_hw_stop().

Fix this by introducing a dedicated helper to destroy mgmt_chann and by adding proper NULL checks before accessing it.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b87f920b934426a24d54613f12ed67c03ae05024 to before 6b3546e3a8c664fb8b97f587fd268dc6e413d79bAffected
  • b87f920b934426a24d54613f12ed67c03ae05024 to before 032ca7a9059c4ba6c329e0f1b442dab54dd9c3e5Affected
  • b87f920b934426a24d54613f12ed67c03ae05024 to before 6270ee26e1edd862ea17e3eba148ca8fb2c99dc9Affected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.18.57 through 6.18.*Not affected
  • 6.19.7 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.