CVE-2026-72331

HighCVSS 7.8

Published: 15/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 15/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

6th percentile - higher than 6% of all known CVEs

Summary

In the Linux kernel's accel/amdxdna driver, there is a use-after-free vulnerability due to a race in VMA access. The functions aie2_populate_range() and amdxdna_umap_release() access a saved VMA pointer that may have already been freed, leading to potential use-after-free.

Risk Assessment

The vulnerability can lead to use-after-free, which may cause system crashes, memory corruption, or potential privilege escalation. Risk is limited to systems with AMD XDNA accelerators.

Recommendation

Apply the kernel patch that removes VMA accesses from these functions to avoid the race. Also update the kernel to a patched version.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix VMA access race aie2_populate_range() and amdxdna_umap_release() access a saved VMA pointer that may have already been freed, leading to a potential use-after-free. Remove the VMA accesses from these functions to avoid the race.