CVE-2026-80608
Received Received - Intake

Use-After-Free in Linux Kernel AMDXDNA Driver

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When force_iova mode is enabled, amdxdna_remove() frees xdna->domain. If amdxdna_gem_obj_free() is called after device removal, it may attempt to access xdna->domain, resulting in a use-after-free. Fix the race by adding freeing xdna->domain as a managed release action, so its lifetime is managed by DRM and remains valid until all managed resources are released.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-28
Last Modified
2026-08-28
Generated
2026-08-28
AI Q&A
2026-08-28
EPSS Evaluated
N/A
NVD
CVE-2026-80608
EUVD
EUVD-2026-67484

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
amd linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a use-after-free vulnerability in the Linux kernel's AMD XDNA accelerator driver. It occurs when force_iova mode is enabled, causing the driver to free a domain object during device removal. If another operation tries to access this freed domain afterward, it leads to memory corruption.

Detection Guidance

This vulnerability is specific to the Linux kernel's amdxdna driver and involves a race condition during device removal. Detection requires checking kernel logs for errors related to amdxdna or iommu domains. Commands like dmesg | grep amdxdna or journalctl -k | grep amdxdna may help identify issues.

Impact Analysis

This could allow an attacker with local access to cause system crashes, data corruption, or potentially execute arbitrary code with kernel privileges. It primarily affects systems using AMD accelerators with the XDNA driver.

Mitigation Strategies

Update the Linux kernel to a patched version where this issue is resolved. Avoid using force_iova mode if possible. Monitor kernel logs for amdxdna-related errors after updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80608. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart