CVE-2026-68380

A flaw was found in the Linux kernel's AMD XDNA accelerator driver. The amdxdna_cmd_submit() function improperly handles references to the mm_struct when scheduling jobs. This can lead to a use-after-free vulnerability, where the mm_struct is deallocated before the job scheduler can access it. A local attacker could potentially exploit this memory corruption to cause system instability or a denial of service.

This vulnerability is rated as having an Important impact because an unprivileged local user capable of submitting commands to the accelerator subsystem could trigger kernel memory corruption, leading to a system crash or potential privilege escalation. Red Hat Enterprise Linux is not affected because the vulnerable AMD XDNA driver is not present in supported kernels. Additionally, exploiting this flaw requires the presence of specialized AMD neural processing hardware.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.