GHSA-79jg-fp86-q5xgHighCVSS 8.8

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu...

Published
August 28, 2026
Last Modified
August 29, 2026

🔗 CVE IDs covered (1)

📋 Description

In the Linux kernel, the following vulnerability has been resolved:

accel/amdxdna: Fix iommu domain lifetime race during device removal

When force_iova mode is enabled, amdxdna_remove() frees xdna->domain. If amdxdna_gem_obj_free() is called after device removal, it may attempt to access xdna->domain, resulting in a use-after-free.

Fix the race by adding freeing xdna->domain as a managed release action, so its lifetime is managed by DRM and remains valid until all managed resources are released.

🔗 References (4)