CVE-2026-72090

A flaw was found in the Linux kernel's amdxdna graphics acceleration driver. A local user could exploit an incorrect client handling issue within the amdxdna_drm_sync_bo_ioctl() function. When performing a SYNC_DIRECT_FROM_DEVICE operation, the amdxdna_hwctx_sync_debug_bo() function is called with an incorrect client, leading to a mismatch in the handle namespace and hardware context ownership. This could potentially allow unauthorized access to debug buffer objects.

This vulnerability is rated as Moderate because exploitation requires local access and specifically targets host systems equipped with AMD neural processing hardware. Red Hat Enterprise Linux releases are not affected by this issue, as the vulnerable amdxdna acceleration driver is not present in supported product kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.