Home

Description

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix NULL pointer dereference of mgmt_chann mgmt_chann may be set to NULL if the firmware returns an unexpected error in aie2_send_mgmt_msg_wait(). This can later lead to a NULL pointer dereference in aie2_hw_stop(). Fix this by introducing a dedicated helper to destroy mgmt_chann and by adding proper NULL checks before accessing it.

PUBLISHED Reserved 2026-01-13 | Published 2026-03-25 | Updated 2026-05-11 | Assigner Linux

Product status

Default status
unaffected

b87f920b934426a24d54613f12ed67c03ae05024 (git) before 032ca7a9059c4ba6c329e0f1b442dab54dd9c3e5
affected

b87f920b934426a24d54613f12ed67c03ae05024 (git) before 6270ee26e1edd862ea17e3eba148ca8fb2c99dc9
affected

Default status
affected

6.14
affected

Any version before 6.14
unaffected

6.19.7 (semver)
unaffected

7.0 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/032ca7a9059c4ba6c329e0f1b442dab54dd9c3e5

git.kernel.org/...c/6270ee26e1edd862ea17e3eba148ca8fb2c99dc9

cve.org (CVE-2026-23328)

nvd.nist.gov (CVE-2026-23328)

Download JSON