Skip to content
Heist/ feed
Back to feed
UnratedFix available

accel/amdxdna: Fix crash when destroying a suspended hardware context

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix crash when destroying a suspended hardware context If userspace issues an ioctl to destroy a hardware context that has already been automatically suspended, the driver may crash because the mailbox channel pointer is NULL for the suspended context. Fix this by checking the mailbox channel pointer in aie2_destroy_context() before accessing it.

Products
Kernel
Affected versions
Not specified
Fixed versions
6.19.7
CVEs
CVE-2026-23341
Confirmed fixed CVEs
Not specified
Updated in this feed
5 Nov 2026, 11:00 UTC · Revision 1

Source evidence

accel/amdxdna: Fix crash when destroying a suspended hardware context

core-osv · Original source

Published 25 Mar 2026, 10:27 UTC

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix crash when destroying a suspended hardware context If userspace issues an ioctl to destroy a hardware context that has already been automatically suspended, the driver may crash because the mailbox channel pointer is NULL for the suspended context. Fix this by checking the mailbox channel pointer in aie2_destroy_context() before accessing it.

osv:CVE-2026-23341

Kernel

Fixed versions: 6.19.7

Complete source record
{
  "id": "b81825ccf0c9af144efaeff71b3ab3c491e0d85f40ea4f42fe3baa953339eff4",
  "url": "https://osv.dev/vulnerability/CVE-2026-23341",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "accel/amdxdna: Fix crash when destroying a suspended hardware context",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix crash when destroying a suspended hardware context If userspace issues an ioctl to destroy a hardware context that has already been automatically suspended, the driver may crash because the mailbox channel pointer is NULL for the suspended context. Fix this by checking the mailbox channel pointer in aie2_destroy_context() before accessing it.",
    "evidence": "osv:CVE-2026-23341",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "6.19.7",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2026-23341",
      "aliases": [
        "CVE-2026-23341"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "b569ff8a1bc1bcd4fdc6fd334604a654f61237a1"
                },
                {
                  "fixed": "2d2c32b1b9e32f25214f0cbc818c4d55f7da1d0e"
                }
              ]
            },
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "2611c9616cb52d3ed54a6095d72d18e645a6955a"
                },
                {
                  "fixed": "a6317704edab95d66a62fc1861d9546284ab678e"
                }
              ]
            },
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "97f27573837ef96b4ba42af463cc800cab615c0e"
                },
                {
                  "fixed": "8363c02863332992a1822688da41f881d88d1631"
                }
              ]
            }
          ],
          "versions": [
            "v6.19.6",
            "v6.19.5",
            "v6.19.4"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23341.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.19.4"
                },
                {
                  "fixed": "6.19.7"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23341.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:43.980485097Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/2d2c32b1b9e32f25214f0cbc818c4d55f7da1d0e",
        "https://git.kernel.org/stable/c/8363c02863332992a1822688da41f881d88d1631",
        "https://git.kernel.org/stable/c/a6317704edab95d66a62fc1861d9546284ab678e",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23341.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-23341",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23341.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-23341",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 511678,
  "published_at": "2026-03-25T10:27:29.438+00:00"
}