CVE-2026-72328

A flaw was found in the Linux kernel's accel/amdxdna component. A race condition exists where the aie2_populate_range() function can attempt to use an amdxdna_umap object that is simultaneously being released. This concurrent access may lead to a use-after-free vulnerability, which could result in denial of service or potentially privilege escalation.

This vulnerability is evaluated with Moderate impact because exploitation requires local access to trigger a concurrency race leading to kernel denial of service, without granting remote reachability. Supported Red Hat Enterprise Linux releases are not affected by this flaw because the vulnerable AMD XDNA driver code is not present in shipping kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.