7.8

CVE-2026-68380

accel/amdxdna: Fix use-after-free of mm_struct in job scheduler

In the Linux kernel, the following vulnerability has been resolved:

accel/amdxdna: Fix use-after-free of mm_struct in job scheduler

amdxdna_cmd_submit() stores current->mm in job->mm without holding any
reference. aie2_sched_job_run() later access job->mm from the DRM
scheduler worker thread. With only a raw pointer and no structural
reference, the mm_struct can be freed before the scheduler runs the job.

Fix this by calling mmgrab() to hold a structural mm_count reference for
the lifetime of the job, paired with mmdrop() in every cleanup path.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version aac243092b707bb3018e951d470cc1a9bcbaba6c
Version < 6875ee2bef48f5d9f045d81a8a4d68893f768a8a
Status affected
Version aac243092b707bb3018e951d470cc1a9bcbaba6c
Version < e8fadbffc19a233d1eedebfb8df0f522d1388280
Status affected
Version aac243092b707bb3018e951d470cc1a9bcbaba6c
Version < faebb7ba1ac65fa5810b640df02ce04e509fdc11
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.14
Status affected
Version 0
Version < 6.14
Status unaffected
Version <= 6.18.*
Version 6.18.42
Status unaffected
Version <= 7.1.*
Version 7.1.6
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.032
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/6875ee2bef48f5d9f045d81a8a4d68893f768a8a
https://git.kernel.org/stable/c/e8fadbffc19a233d1eedebfb8df0f522d1388280
https://git.kernel.org/stable/c/faebb7ba1ac65fa5810b640df02ce04e509fdc11