CVE-2026-23328

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-23328
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23328.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-23328
Downstream
Published
2026-03-25T10:27:20.559Z
Modified
2026-04-02T13:12:21.540262Z
Summary
accel/amdxdna: Fix NULL pointer dereference of mgmt_chann
Details

In the Linux kernel, the following vulnerability has been resolved:

accel/amdxdna: Fix NULL pointer dereference of mgmt_chann

mgmtchann may be set to NULL if the firmware returns an unexpected error in aie2sendmgmtmsgwait(). This can later lead to a NULL pointer dereference in aie2hw_stop().

Fix this by introducing a dedicated helper to destroy mgmt_chann and by adding proper NULL checks before accessing it.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23328.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b87f920b934426a24d54613f12ed67c03ae05024
Fixed
032ca7a9059c4ba6c329e0f1b442dab54dd9c3e5
Fixed
6270ee26e1edd862ea17e3eba148ca8fb2c99dc9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23328.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.14.0
Fixed
6.19.7

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23328.json"