CVE-2026-72328: accel/amdxdna: Fix potential amdxdna_umap lifetime race
In the Linux kernel, the following vulnerability has been resolved:
accel/amdxdna: Fix potential amdxdnaumap lifetime race
amdxdnaumaprelease() calls the blocking mmuintervalnotifierremove() before removing the object from abo->mem.umaplist. If aie2populaterange() runs concurrently, it may obtain a reference to an amdxdnaumap that is being released, leading to a potential use-after-free.
Use krefgetunlesszero() in aie2populaterange() when acquiring a reference. If the reference count has already dropped to zero, release is in progress and the entry is skipped.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72328?
CVE-2026-72328 has a risk score of 34, indicating a moderate severity level.
What type of vulnerability is CVE-2026-72328?
CVE-2026-72328 is classified as a Use After Free vulnerability.
How do I fix CVE-2026-72328?
To fix CVE-2026-72328, you should update to the latest Linux kernel version where this vulnerability has been resolved.
What systems are affected by CVE-2026-72328?
CVE-2026-72328 affects the Linux kernel specifically in the accel/amdxdna module.
When was CVE-2026-72328 published?
CVE-2026-72328 was published on August 15, 2026.