CVE-2026-23295

Source
https://cve.org/CVERecord?id=CVE-2026-23295
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23295.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-23295
Downstream
Published
2026-03-25T10:26:52.789Z
Modified
2026-04-02T13:12:20.408722Z
Summary
accel/amdxdna: Fix dead lock for suspend and resume
Details

In the Linux kernel, the following vulnerability has been resolved:

accel/amdxdna: Fix dead lock for suspend and resume

When an application issues a query IOCTL while auto suspend is running, a deadlock can occur. The query path holds devlock and then calls pmruntimeresumeandget(), which waits for the ongoing suspend to complete. Meanwhile, the suspend callback attempts to acquire devlock and blocks, resulting in a deadlock.

Fix this by releasing devlock before calling pmruntimeresumeandget() and reacquiring it after the call completes. Also acquire devlock in the resume callback to keep the locking consistent.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23295.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
063db451832b8849faf1b0b8404b3a6a39995b29
Fixed
ac24537478dd8eb2fd3984b4652bb19461e5e74c
Fixed
1aa82181a3c285c7351523d587f7981ae4c015c8

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23295.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.7

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23295.json"