CVE-2026-72093: accel/amdxdna: Fix use-after-free in amdxdna_gem_dmabuf_mmap()
In the Linux kernel, the following vulnerability has been resolved:
accel/amdxdna: Fix use-after-free in amdxdnagemdmabufmmap()
When vminsertpages() fails, the error path calls vma->vmops->close(vma) which internally calls drmgemvmclose() → drmgemobjectput(), releasing the GEM object reference acquired at the start of the function. However, the closevma label then falls through to putobj, which calls drmgemobjectput() a second time on the same object.
If the first put releases the last reference, the object is freed and the second put accesses freed memory, causing a use-after-free.
Fix by returning directly from closevma instead of falling through to putobj, since the close handler already performs all necessary cleanup including the object put.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72093?
The severity of CVE-2026-72093 is rated at 43 on the risk scale.
How do I fix CVE-2026-72093?
To fix CVE-2026-72093, ensure that you update to the patched version of the Linux kernel where the vulnerability has been addressed.
What systems are affected by CVE-2026-72093?
CVE-2026-72093 affects systems running vulnerable versions of the Linux kernel that utilize the accel/amdxdna component.
What kind of vulnerability is CVE-2026-72093?
CVE-2026-72093 is characterized as a use-after-free vulnerability in the Linux kernel.
When was CVE-2026-72093 published?
CVE-2026-72093 was published on August 15, 2026.