CVE-2026-23328
NULL Pointer Dereference in Linux Kernel AMD XDNA accel Component
Publication date: 2026-03-25
Last updated on: 2026-04-23
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | 6.14 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | From 6.14.1 (inc) to 6.19.7 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-476 | The product dereferences a pointer that it expects to be valid but is NULL. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the Linux kernel's accel/amdxdna component. It involves a NULL pointer dereference related to the variable mgmt_chann. Specifically, mgmt_chann may be set to NULL if the firmware returns an unexpected error during the function aie2_send_mgmt_msg_wait(). Later, when the function aie2_hw_stop() tries to access mgmt_chann without checking if it is NULL, it can cause a NULL pointer dereference, potentially leading to a crash or other unintended behavior.
The fix involved adding a dedicated helper function to properly destroy mgmt_chann and introducing NULL checks before accessing it to prevent dereferencing a NULL pointer.
How can this vulnerability impact me? :
A NULL pointer dereference in the Linux kernel can cause the affected system to crash or become unstable. This may lead to denial of service conditions where the system or certain functionalities stop working unexpectedly.
What immediate steps should I take to mitigate this vulnerability?
The vulnerability in the Linux kernel related to a NULL pointer dereference in the accel/amdxdna component has been fixed by adding proper NULL checks and a helper to destroy mgmt_chann.
To mitigate this vulnerability immediately, you should update your Linux kernel to a version that includes this fix.