CVE-2026-80657: accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer
Published Aug 28, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer
The management mailbox channel cleanup helpers can be called from error handling paths when mgmtchann has already been destroyed.
Add NULL checks to xdnamailboxfreechannel() and xdnamailboxstopchannel() so the cleanup path safely returns instead of dereferencing a NULL mailbox channel pointer.
Affected Software
1 affected component
Linux Linux kernel
Event History
Aug 28, 2026
CVE Published
via MITRE·06:49 AM
Data Sourced
via MITRE·06:49 AM
Description
Frequently Asked Questions
1
When can the unsafe cleanup path be reached?
It can be reached during error handling when the management mailbox channel has already been destroyed and cleanup helpers are invoked afterward.
2
Which cleanup operations are protected by the fix?
The fix adds NULL checks to xdna_mailbox_free_channel() and xdna_mailbox_stop_channel(), allowing those helpers to return safely when no mailbox channel exists.