CVE-2026-72090: accel/amdxdna: Use caller client for debug BO sync
In the Linux kernel, the following vulnerability has been resolved:
accel/amdxdna: Use caller client for debug BO sync
amdxdnadrmsyncboioctl() looks up args->handle in the ioctl caller's drmfile. For SYNCDIRECTFROMDEVICE, it then calls amdxdnahwctxsyncdebugbo(), but passes abo->client.
amdxdnahwctxsyncdebugbo() uses the passed client both as the handle namespace for debugbohdl and as the owner of the hardware context xarray. Those must match the file that supplied args->handle. The BO's stored client pointer is object state, not the ioctl context.
Pass filp->driverpriv instead, matching the original handle lookup.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72090?
The severity of CVE-2026-72090 is rated at a risk level of 37.
What is CVE-2026-72090 related to?
CVE-2026-72090 is related to a vulnerability in the Linux kernel affecting the debug buffer object synchronization in the AMD GPU driver.
How do I fix CVE-2026-72090?
To fix CVE-2026-72090, update your Linux kernel to the latest version where this vulnerability has been resolved.
What systems are affected by CVE-2026-72090?
CVE-2026-72090 affects systems running the AMD GPU driver in the Linux kernel.
What impact does CVE-2026-72090 have on system security?
CVE-2026-72090 could potentially lead to unauthorized access or manipulation of debug buffer objects, impacting system security.