CVE-2026-80657
Received Received - Intake

NULL Pointer Dereference in Linux Kernel AMDXDNA Driver

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer The management mailbox channel cleanup helpers can be called from error handling paths when mgmt_chann has already been destroyed. Add NULL checks to xdna_mailbox_free_channel() and xdna_mailbox_stop_channel() so the cleanup path safely returns instead of dereferencing a NULL mailbox channel pointer.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-28
Last Modified
2026-08-28
Generated
2026-09-17
AI Q&A
2026-08-28
EPSS Evaluated
2026-09-15
NVD
CVE-2026-80657
EUVD
EUVD-2026-67533

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a NULL pointer dereference issue in the AMD XDNA accelerator driver. The management mailbox channel cleanup functions may be called when the mailbox channel is already destroyed, leading to potential crashes if NULL checks are missing.

Detection Guidance

This vulnerability is specific to the Linux kernel's amdxdna driver and involves NULL pointer dereferencing during mailbox channel cleanup. Detection requires checking kernel logs for crashes or errors related to the amdxdna module. Commands like dmesg | grep amdxdna or journalctl -k | grep amdxdna may reveal issues.

Impact Analysis

This vulnerability could cause system instability or crashes if exploited, particularly on systems using AMD XDNA accelerators. It may lead to denial-of-service conditions or unexpected behavior during error recovery.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it pertains to a NULL pointer dereference in the Linux kernel's AMD XDNA accelerator driver. It is a local denial-of-service issue rather than a data exposure or privacy violation.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for CVE-2026-80657. If immediate patching is not possible, consider disabling the amdxdna module if not in use. Monitor kernel logs for related errors as a sign of exploitation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80657. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart