7.8

CVE-2026-72328

accel/amdxdna: Fix potential amdxdna_umap lifetime race

In the Linux kernel, the following vulnerability has been resolved:

accel/amdxdna: Fix potential amdxdna_umap lifetime race

amdxdna_umap_release() calls the blocking mmu_interval_notifier_remove()
before removing the object from abo->mem.umap_list. If
aie2_populate_range() runs concurrently, it may obtain a reference to an
amdxdna_umap that is being released, leading to a potential use-after-free.

Use kref_get_unless_zero() in aie2_populate_range() when acquiring a
reference. If the reference count has already dropped to zero, release
is in progress and the entry is skipped.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version e486147c912f653ef4b60a6c7dbd4168a4c56a9f
Version < 267809e2c56fbea486f7250c8a4acddcc3c54dc5
Status affected
Version e486147c912f653ef4b60a6c7dbd4168a4c56a9f
Version < 91e8109ecffb925b6202d2737384df285b195bfb
Status affected
Version e486147c912f653ef4b60a6c7dbd4168a4c56a9f
Version < 14f172eff9c19f8043a9858845f33cd034f3a41e
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.16
Status affected
Version 0
Version < 6.16
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.066
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/267809e2c56fbea486f7250c8a4acddcc3c54dc5
https://git.kernel.org/stable/c/91e8109ecffb925b6202d2737384df285b195bfb
https://git.kernel.org/stable/c/14f172eff9c19f8043a9858845f33cd034f3a41e