CVE-2026-80657

A flaw was found in the Linux kernel's accel/amdxdna component. The management mailbox channel cleanup helpers, xdna_mailbox_free_channel() and xdna_mailbox_stop_channel(), could be called from error handling paths when the mgmt_chann was already destroyed. This could lead to a NULL pointer dereference, potentially causing a system crash and resulting in a Denial of Service (DoS).

A low severity flaw was found in the Linux kernel's accel/amdxdna driver. The management mailbox channel cleanup helpers, xdna_mailbox_free_channel() and xdna_mailbox_stop_channel(), could be called from error handling paths after the management mailbox channel (mgmt_chann) had already been destroyed, leading to a NULL pointer dereference. A local user on a system with the affected AMD XDNA accelerator driver and hardware could trigger this condition to crash the kernel, resulting in a denial of service; the flaw does not impact confidentiality or integrity. All currently tracked Red Hat Enterprise Linux and Red Hat In-Vehicle OS kernel streams are not affected by this flaw because the vulnerable code is not present in the shipped kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.