CVE-2026-23328 — NULL Pointer Dereference in Linux
Severity
5.3MEDIUM
No vectorEPSS
0.0%
top 93.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
accel/amdxdna: Fix NULL pointer dereference of mgmt_chann
mgmt_chann may be set to NULL if the firmware returns an unexpected
error in aie2_send_mgmt_msg_wait(). This can later lead to a NULL
pointer dereference in aie2_hw_stop().
Fix this by introducing a dedicated helper to destroy mgmt_chann
and by adding proper NULL checks before accessing it.
Affected Packages4 packages
▶CVEListV5linux/linuxb87f920b934426a24d54613f12ed67c03ae05024 — 032ca7a9059c4ba6c329e0f1b442dab54dd9c3e5+2
🔴Vulnerability Details
3GHSA▶
GHSA-j57x-5h9f-j263: In the Linux kernel, the following vulnerability has been resolved:
accel/amdxdna: Fix NULL pointer dereference of mgmt_chann
mgmt_chann may be set↗2026-03-25
OSV▶
CVE-2026-23328: In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix NULL pointer dereference of mgmt_chann mgmt_chann may be set to↗2026-03-25