CVE-2026-23328NULL Pointer Dereference in Linux

Severity
5.3MEDIUM
No vector
EPSS
0.0%
top 93.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMar 25

Description

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix NULL pointer dereference of mgmt_chann mgmt_chann may be set to NULL if the firmware returns an unexpected error in aie2_send_mgmt_msg_wait(). This can later lead to a NULL pointer dereference in aie2_hw_stop(). Fix this by introducing a dedicated helper to destroy mgmt_chann and by adding proper NULL checks before accessing it.

Affected Packages4 packages

Linuxlinux/linux_kernel6.14.06.19.7
Debianlinux/linux_kernel< 6.19.8-1
CVEListV5linux/linuxb87f920b934426a24d54613f12ed67c03ae05024032ca7a9059c4ba6c329e0f1b442dab54dd9c3e5+2
debiandebian/linux< linux 6.19.8-1 (forky)

🔴Vulnerability Details

3
OSV
accel/amdxdna: Fix NULL pointer dereference of mgmt_chann2026-03-25
GHSA
GHSA-j57x-5h9f-j263: In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix NULL pointer dereference of mgmt_chann mgmt_chann may be set2026-03-25
OSV
CVE-2026-23328: In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix NULL pointer dereference of mgmt_chann mgmt_chann may be set to2026-03-25

📋Vendor Advisories

2
Red Hat
kernel: accel/amdxdna: Fix NULL pointer dereference of mgmt_chann2026-03-25
Debian
CVE-2026-23328: linux - In the Linux kernel, the following vulnerability has been resolved: accel/amdxd...2026

🕵️Threat Intelligence

1
Wiz
CVE-2026-23328 Impact, Exploitability, and Mitigation Steps | Wiz