CVE-2026-72331 (GCVE-0-2026-72331)

Vulnerability from cvelistv5 – Published: 2026-08-15 05:55 – Updated: 2026-08-17 05:42
VLAI
Title
accel/amdxdna: Fix VMA access race
Summary
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix VMA access race aie2_populate_range() and amdxdna_umap_release() access a saved VMA pointer that may have already been freed, leading to a potential use-after-free. Remove the VMA accesses from these functions to avoid the race.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: e486147c912f653ef4b60a6c7dbd4168a4c56a9f , < bea20225c67fed9be3e98619c77af6ee3f43fe07 (git)
Affected: e486147c912f653ef4b60a6c7dbd4168a4c56a9f , < 1ba02717e821cf14ece642273958647e79698d3d (git)
guessed Create a notification for this product.
Linux Linux Affected: 6.16
Unaffected: 0 , < 6.16 (semver)
Unaffected: 7.1.5 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/accel/amdxdna/aie2_ctx.c",
            "drivers/accel/amdxdna/amdxdna_gem.c",
            "drivers/accel/amdxdna/amdxdna_gem.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "bea20225c67fed9be3e98619c77af6ee3f43fe07",
              "status": "affected",
              "version": "e486147c912f653ef4b60a6c7dbd4168a4c56a9f",
              "versionType": "git"
            },
            {
              "lessThan": "1ba02717e821cf14ece642273958647e79698d3d",
              "status": "affected",
              "version": "e486147c912f653ef4b60a6c7dbd4168a4c56a9f",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/accel/amdxdna/aie2_ctx.c",
            "drivers/accel/amdxdna/amdxdna_gem.c",
            "drivers/accel/amdxdna/amdxdna_gem.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.16"
            },
            {
              "lessThan": "6.16",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.5",
                  "versionStartIncluding": "6.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "6.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\naccel/amdxdna: Fix VMA access race\n\naie2_populate_range() and amdxdna_umap_release() access a saved VMA\npointer that may have already been freed, leading to a potential\nuse-after-free.\n\nRemove the VMA accesses from these functions to avoid the race."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bug is reached only via local syscalls on the AMD XDNA DRM accel render node (open, DRM_IOCTL_AMDXDNA_CREATE_BO/EXEC_CMD, mmap/munmap) in drivers/accel/amdxdna; there is no network-facing handler.\nAC:L - The UAF is a mmap/munmap versus deferred amdxdna_umap_release/aie2_populate_range race; a local attacker controls both sides with concurrent threads and can reliably trigger MMU_NOTIFY_UNMAP while work still holds a stale vma pointer.\nPR:L - All vulnerable ioctls use DRM_AUTH (flag 0) and only DRM_ROOT_ONLY SET_STATE is excluded; exploitation needs local access to the render node, which unprivileged users typically have via the render group, not real root.\nUI:N - No victim interaction is required; the attacker opens the device, imports/maps buffers, and races munmap or command submission in their own process to hit the freed VMA.\nS:U - Impact is kernel heap corruption and privilege escalation within the host kernel via a local DRM client; it does not cross a VM, container, or IOMMU security boundary.\nC:H - Use-after-free of a freed vm_area_struct and vm_file in amdxdna_umap_release (and stale vma reads in aie2_populate_range) can expose adjacent kernel memory and be weaponized for arbitrary kernel read primitives.\nI:H - UAF on vma/vm_file during mapping_clear_unevictable enables corrupting kernel objects and control data, supporting heap grooming and arbitrary kernel write or code execution for local privilege escalation.\nA:H - Dereferencing a freed VMA in kernel context can cause oops/panic or wedged NPU workloads; UAF in this path is independently sufficient for complete local denial of service even if exploitation fails."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T05:42:53.397Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/bea20225c67fed9be3e98619c77af6ee3f43fe07"
        },
        {
          "url": "https://git.kernel.org/stable/c/1ba02717e821cf14ece642273958647e79698d3d"
        }
      ],
      "title": "accel/amdxdna: Fix VMA access race",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-72331",
    "datePublished": "2026-08-15T05:55:41.196Z",
    "dateReserved": "2026-08-09T03:40:39.919Z",
    "dateUpdated": "2026-08-17T05:42:53.397Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-72331",
      "date": "2026-09-21",
      "epss": "0.00165",
      "percentile": "0.06179"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "drivers/accel/amdxdna/aie2_ctx.c",
                  "drivers/accel/amdxdna/amdxdna_gem.c",
                  "drivers/accel/amdxdna/amdxdna_gem.h"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "bea20225c67fed9be3e98619c77af6ee3f43fe07",
                    "status": "affected",
                    "version": "e486147c912f653ef4b60a6c7dbd4168a4c56a9f",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "1ba02717e821cf14ece642273958647e79698d3d",
                    "status": "affected",
                    "version": "e486147c912f653ef4b60a6c7dbd4168a4c56a9f",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "drivers/accel/amdxdna/aie2_ctx.c",
                  "drivers/accel/amdxdna/amdxdna_gem.c",
                  "drivers/accel/amdxdna/amdxdna_gem.h"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "6.16"
                  },
                  {
                    "lessThan": "6.16",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.1.*",
                    "status": "unaffected",
                    "version": "7.1.5",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.2",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\naccel/amdxdna: Fix VMA access race\n\naie2_populate_range() and amdxdna_umap_release() access a saved VMA\npointer that may have already been freed, leading to a potential\nuse-after-free.\n\nRemove the VMA accesses from these functions to avoid the race."
          }
        ],
        "id": "CVE-2026-72331",
        "lastModified": "2026-08-17T06:18:36.713",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-08-15T06:22:06.200",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/1ba02717e821cf14ece642273958647e79698d3d"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/bea20225c67fed9be3e98619c77af6ee3f43fe07"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Received"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-18T15:16:22+00:00",
      "cve": "CVE-2026-72331",
      "id": "CVE-2026-72331",
      "initial_release_date": "2026-08-15T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: accel/amdxdna: Fix VMA access race",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-72331.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "important",
      "current_release_date": "2026-09-11T16:29:59Z",
      "cve": "CVE-2026-72331",
      "id": "CVE-2026-72331",
      "initial_release_date": "2026-09-01T13:30:05Z",
      "product_status:known_not_affected": "362",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-72331",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-72331.json",
      "version": "3"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.