CVE-2025-71308: accel/amdxdna: Fix potential NULL pointer dereference in context cleanup
In the Linux kernel, the following vulnerability has been resolved:
accel/amdxdna: Fix potential NULL pointer dereference in context cleanup
aiedestroycontext() is invoked during error handling in aie2createcontext(). However, aiedestroycontext() assumes that the context's mailbox channel pointer is non-NULL. If mailbox channel creation fails, the pointer remains NULL and calling aiedestroycontext() can lead to a NULL pointer dereference.
In aie2createcontext(), replace aiedestroycontext() with a function which request firmware to remove the context created previously.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71308?
The severity of CVE-2025-71308 is rated as medium with a CVSS score of 5.5.
How do I fix CVE-2025-71308?
To fix CVE-2025-71308, update your Linux kernel to the latest version that includes the patch for this vulnerability.
What type of vulnerability is CVE-2025-71308?
CVE-2025-71308 is a Null Pointer Dereference vulnerability found in the Linux kernel.
What component is affected by CVE-2025-71308?
CVE-2025-71308 affects the accel/amdxdna component of the Linux kernel.
What happens if CVE-2025-71308 is exploited?
If exploited, CVE-2025-71308 could cause a denial of service due to a NULL pointer dereference.