CVE-2026-72091
Received Received - Intake

Null Pointer Dereference in Linux Kernel AMDXDNA Driver

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject user command submission without a command BO amdxdna_drm_submit_execbuf() passes the user-supplied command BO handle straight into amdxdna_cmd_submit() with drv_cmd == NULL. When the handle is AMDXDNA_INVALID_BO_HANDLE (0), the block that fetches job->cmd_bo is skipped, leaving it NULL, and no check rejects it on the user path (the !job->cmd_bo guard lives inside the != INVALID branch). The job is then armed and pushed to the DRM scheduler. aie2_sched_job_run() takes the drv_cmd == NULL path and calls amdxdna_cmd_set_state(job->cmd_bo) -> amdxdna_gem_vmap(NULL) -> to_gobj(NULL)->dev, a NULL pointer dereference in the drm_sched worker. A process with access to the accel node on a system with a probed AMD NPU can trigger a kernel oops with a single AMDXDNA_EXEC_CMD ioctl (cmd_handles = 0). Only internal driver commands (SYNC_DEBUG_BO / ATTACH_DEBUG_BO) legitimately pass AMDXDNA_INVALID_BO_HANDLE, and they always set drv_cmd. Reject the invalid handle for user submissions (drv_cmd == NULL) at the submit choke point so every user path is covered. Found by 0sec automated security-research tooling (https://0sec.ai).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72091
EUVD
EUVD-2026-59049

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
amd linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a NULL pointer dereference flaw in the Linux kernel's AMD XDNA acceleration driver. It occurs when a user submits a command without a valid command buffer handle, leading to a kernel crash (oops) during job execution. The issue arises because the driver fails to validate the command buffer handle before processing, allowing an attacker with access to the acceleration node to trigger the flaw via a specific ioctl call.

Detection Guidance

This vulnerability can be detected by checking for kernel oopses or crashes related to the AMD NPU driver. Monitor system logs for errors from the accel/amdxdna module or drm_sched worker. No specific commands are provided in the context.

Impact Analysis

If you have a system with an AMD NPU (Neural Processing Unit) and the Linux kernel's AMD XDNA driver is loaded, an attacker with local access to the acceleration node could trigger a kernel crash. This could lead to denial-of-service conditions, system instability, or potential privilege escalation if combined with other exploits. Normal users without access to the acceleration node are not affected.

Mitigation Strategies

Apply the latest Linux kernel patches that address this issue. Restrict access to the accel node to prevent unauthorized users from triggering the vulnerability. Monitor for kernel crashes or oopses as potential indicators of exploitation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72091. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart