CVE-2026-72091

A flaw was found in the Linux kernel's AMD XDNA accelerator driver. An attacker with local access to the accelerator node can trigger a null pointer dereference by submitting a command with an invalid command buffer object. This can lead to a kernel crash, resulting in a denial of service (DoS) for the affected system.

This vulnerability is rated as Moderate because exploitation is limited to local users with direct permissions to access the AMD NPU device node, constraining the potential impact to a kernel crash and system denial of service. The flaw cannot be exploited across a network and does not facilitate privilege escalation or data confidentiality loss. Red Hat Enterprise Linux releases are not affected by this vulnerability, as the corresponding AMD XDNA driver is not present in supported product kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.