PT-2026-6133 · Linux+2 · Linux Kernel+2
Published
2026-01-01
·
Updated
2026-05-22
·
CVE-2026-23063
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains an issue related to the
uacce subsystem and safe queue release. Directly calling the put queue function poses a risk because it does not guarantee that resources associated with the uacce queue have been fully released. To address this, a stop queue operation has been added for the UACCE CMD PUT Q command, deferring the put queue operation to the final resource release. Queue states are defined as UACCE Q ZOMBIE, UACCE Q INIT, and UACCE Q STARTED. A potential issue arises when executing poweroff -f in a virtualized environment while accelerators are still active, potentially causing uacce fops release and uacce remove to run concurrently. This can lead to uacce put queue within uacce fops release attempting to access a NULL ops pointer. State checks have been implemented to prevent access to freed pointers.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu