-

CVE-2026-72092

accel/amdxdna: reject command submission on devices without a submit op

In the Linux kernel, the following vulnerability has been resolved:

accel/amdxdna: reject command submission on devices without a submit op

amdxdna_cmd_submit() calls xdna->dev_info->ops->cmd_submit()
unconditionally, but only aie2_dev_ops defines that callback.
aie4_vf_ops (the AIE4 SR-IOV virtual function) does not, so a user
AMDXDNA_EXEC_CMD ioctl on an AIE4 device reaches a NULL function-pointer
call and oopses the kernel. AIE4 submits work through a mapped user queue
and doorbell, not this ioctl path.

Reject the submission early with -EOPNOTSUPP when the device provides no
cmd_submit op, so the shared EXEC ioctl is a clean no-op on such devices.

Found by 0sec automated security-research tooling (https://0sec.ai).
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version aac243092b707bb3018e951d470cc1a9bcbaba6c
Version < af7a4c2caa7a191d6e7ed33903b69f9901874cd0
Status affected
Version aac243092b707bb3018e951d470cc1a9bcbaba6c
Version < f7d08603c87bae19ca3e424da5ab6d0aee81886e
Status affected
Version aac243092b707bb3018e951d470cc1a9bcbaba6c
Version < 38953513d7313992676d4136cd425cdb70c6278e
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.14
Status affected
Version 0
Version < 6.14
Status unaffected
Version <= 6.18.*
Version 6.18.42
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.11
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/af7a4c2caa7a191d6e7ed33903b69f9901874cd0
https://git.kernel.org/stable/c/f7d08603c87bae19ca3e424da5ab6d0aee81886e
https://git.kernel.org/stable/c/38953513d7313992676d4136cd425cdb70c6278e