What’s Vulnerable › Vulnerabilities

CVE-2026-23341: accel/amdxdna: Fix crash when destroying a suspended hardware context

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-03-25 · updated 2026-10-15
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix crash when destroying a suspended hardware context If userspace issues an ioctl to destroy a hardware context that has already been automatically suspended, the driver may crash because the mailbox channel pointer is NULL for the suspended context. Fix this by checking the mailbox channel pointer in aie2_destroy_context() before accessing it.

Affected products

• Linux kernel: from 6.19.4 before 6.19.7 — fixed in 6.19.7

How to fix

Upgrade to a fixed version: Linux kernel 6.19.7. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2d2c32b1b9e32f25214f0cbc818c4d55f7da1d0e
• https://git.kernel.org/stable/c/8363c02863332992a1822688da41f881d88d1631
• https://git.kernel.org/stable/c/a6317704edab95d66a62fc1861d9546284ab678e

Get alerted when CVE-2026-23341 or the next vulnerability affects your stack