CVE-2026-72092
kernel: accel/amdxdna: reject command submission on devices without a submit op
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 15, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel. A local user could trigger a kernel crash by submitting a command to an AMD XDNA device that does not support the command submission operation. This leads to a Denial of Service (DoS).
Statement
This vulnerability is rated Moderate because exploitation requires local access with permissions to dispatch ioctl commands to specialized accelerator hardware interfaces, restricting the impact to a denial of service via a system crash. Red Hat Enterprise Linux releases are not affected because the vulnerable AMD XDNA accelerator subsystem was introduced in upstream Linux kernel 6.14 and is not present in supported Red Hat products.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 · NULL Pointer Dereference