PT-2026-43691 · Linux · Linux

Published 2026-05-27 · Updated 2026-05-27 · CVE-2025-71308

Mitre

In the Linux kernel, the following vulnerability has been resolved:

accel/amdxdna: Fix potential NULL pointer dereference in context cleanup

aie destroy context() is invoked during error handling in aie2 create context(). However, aie destroy context() assumes that the context's mailbox channel pointer is non-NULL. If mailbox channel creation fails, the pointer remains NULL and calling aie destroy context() can lead to a NULL pointer dereference.

In aie2 create context(), replace aie destroy context() with a function which request firmware to remove the context created previously.

Related Identifiers

CVE-2025-71308

Affected Products

Linux

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-71308 · Security Note
• https://git.kernel.org/stable/c/2611c9616cb52d3ed54a6095d72d18e645a6955a · Note
• https://git.kernel.org/stable/c/97f27573837ef96b4ba42af463cc800cab615c0e · Note