Riskcovery

CVE-2026-45980

accel/amdxdna: Stop job scheduling across aie2_release_resource()

State
Published
Severity
7.8 High
Published
May 27, 2026
Updated
Aug 5, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

accel/amdxdna: Stop job scheduling across aie2_release_resource()

Running jobs on a hardware context while it is in the process of releasing resources can lead to use-after-free and crashes.

Fix this by stopping job scheduling before calling aie2_release_resource() and restarting it after the release completes. Additionally, aie2_sched_job_run() now checks whether the hardware context is still active.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4fd6ca90fc7f509977585d39885f21b2911123f3 to before b79d31dce49b50c79620389b3639280802a86960Affected
  • 4fd6ca90fc7f509977585d39885f21b2911123f3 to before 688c3ff079b10e4600f040944430d3d4ff448a15Affected
  • 4fd6ca90fc7f509977585d39885f21b2911123f3 to before f1370241fe8045702bc9d0812b996791f0500f1bAffected
  • 36f781a3f0deac92f169416997a17e73538cf470Affected
  • 6.14.9 to before 6.15Affected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.18.14 through 6.18.*Not affected
  • 6.19.4 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.