Home

Description

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix potential NULL pointer dereference in context cleanup aie_destroy_context() is invoked during error handling in aie2_create_context(). However, aie_destroy_context() assumes that the context's mailbox channel pointer is non-NULL. If mailbox channel creation fails, the pointer remains NULL and calling aie_destroy_context() can lead to a NULL pointer dereference. In aie2_create_context(), replace aie_destroy_context() with a function which request firmware to remove the context created previously.

PUBLISHED Reserved 2026-05-08 | Published 2026-05-27 | Updated 2026-05-27 | Assigner Linux

Product status

Default status
unaffected

be462c97b7dfd24999babe39cce3de224ebe1f80 (git) before 2611c9616cb52d3ed54a6095d72d18e645a6955a
affected

be462c97b7dfd24999babe39cce3de224ebe1f80 (git) before 97f27573837ef96b4ba42af463cc800cab615c0e
affected

Default status
affected

6.14
affected

Any version before 6.14
unaffected

6.19.4 (semver)
unaffected

7.0 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/2611c9616cb52d3ed54a6095d72d18e645a6955a

git.kernel.org/...c/97f27573837ef96b4ba42af463cc800cab615c0e

cve.org (CVE-2025-71308)

nvd.nist.gov (CVE-2025-71308)

Download JSON