CVE-2026-23328
published 2026-03-25CVE-2026-23328: In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix NULL pointer dereference of mgmt_chann mgmt_chann may be set to NULL if…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.11%
1.3th percentile
In the Linux kernel, the following vulnerability has been resolved:
accel/amdxdna: Fix NULL pointer dereference of mgmt_chann
mgmt_chann may be set to NULL if the firmware returns an unexpected
error in aie2_send_mgmt_msg_wait(). This can later lead to a NULL
pointer dereference in aie2_hw_stop().
Fix this by introducing a dedicated helper to destroy mgmt_chann
and by adding proper NULL checks before accessing it.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.19.8-1 (forky) | linux 6.19.8-1 (forky) |
| linux | linux | — | — |
| linux | linux | >= b87f920b934426a24d54613f12ed67c03ae05024 < 032ca7a9059c4ba6c329e0f1b442dab54dd9c3e5 | 032ca7a9059c4ba6c329e0f1b442dab54dd9c3e5 |
| linux | linux | >= b87f920b934426a24d54613f12ed67c03ae05024 < 6270ee26e1edd862ea17e3eba148ca8fb2c99dc9 | 6270ee26e1edd862ea17e3eba148ca8fb2c99dc9 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.19.8-1 | 6.19.8-1 |
| linux | linux_kernel | >= 6.14.0 < 6.19.7 | 6.19.7 |
| linux | linux_kernel | >= 6.14.1 < 6.19.7 | 6.19.7 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 6.19.6/7.0-rc2 amdxdna aie2_send_mgmt_msg_wait null pointer dereference (Nessus ID 304098 / WID-SEC-2026-0861)
vuldb·2026-06-17·CVSS 5.5
CVE-2026-23328 [MEDIUM] Linux Kernel up to 6.19.6/7.0-rc2 amdxdna aie2_send_mgmt_msg_wait null pointer dereference (Nessus ID 304098 / WID-SEC-2026-0861)
A vulnerability labeled as critical has been found in Linux Kernel up to 6.19.6/7.0-rc2. This impacts the function aie2_send_mgmt_msg_wait of the component amdxdna. The manipulation results in null pointer dereference.
This vulnerability is identified as CVE-2026-23328. The attack can only be performed from the local network. There is not any exploit available.
The affected component should be upgraded.
OSV
accel/amdxdna: Fix NULL pointer dereference of mgmt_chann
osv·2026-03-25
CVE-2026-23328 accel/amdxdna: Fix NULL pointer dereference of mgmt_chann
accel/amdxdna: Fix NULL pointer dereference of mgmt_chann
In the Linux kernel, the following vulnerability has been resolved:
accel/amdxdna: Fix NULL pointer dereference of mgmt_chann
mgmt_chann may be set to NULL if the firmware returns an unexpected
error in aie2_send_mgmt_msg_wait(). This can later lead to a NULL
pointer dereference in aie2_hw_stop().
Fix this by introducing a dedicated helper to destroy mgmt_chann
and by adding proper NULL checks before accessing it.
GHSA
GHSA-j57x-5h9f-j263: In the Linux kernel, the following vulnerability has been resolved:
accel/amdxdna: Fix NULL pointer dereference of mgmt_chann
mgmt_chann may be set
ghsa_unreviewed·2026-03-25
CVE-2026-23328 GHSA-j57x-5h9f-j263: In the Linux kernel, the following vulnerability has been resolved:
accel/amdxdna: Fix NULL pointer dereference of mgmt_chann
mgmt_chann may be set
In the Linux kernel, the following vulnerability has been resolved:
accel/amdxdna: Fix NULL pointer dereference of mgmt_chann
mgmt_chann may be set to NULL if the firmware returns an unexpected
error in aie2_send_mgmt_msg_wait(). This can later lead to a NULL
pointer dereference in aie2_hw_stop().
Fix this by introducing a dedicated helper to destroy mgmt_chann
and by adding proper NULL checks before accessing it.
OSV
CVE-2026-23328: In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix NULL pointer dereference of mgmt_chann mgmt_chann may be set to
osv·2026-03-25
CVE-2026-23328 CVE-2026-23328: In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix NULL pointer dereference of mgmt_chann mgmt_chann may be set to
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix NULL pointer dereference of mgmt_chann mgmt_chann may be set to NULL if the firmware returns an unexpected error in aie2_send_mgmt_msg_wait(). This can later lead to a NULL pointer dereference in aie2_hw_stop(). Fix this by introducing a dedicated helper to destroy mgmt_chann and by adding proper NULL checks before accessing it.
Red Hat
kernel: accel/amdxdna: Fix NULL pointer dereference of mgmt_chann
vendor_redhat·2026-03-25
CVE-2026-23328 [MEDIUM] CWE-476 kernel: accel/amdxdna: Fix NULL pointer dereference of mgmt_chann
kernel: accel/amdxdna: Fix NULL pointer dereference of mgmt_chann
In the Linux kernel, the following vulnerability has been resolved:
accel/amdxdna: Fix NULL pointer dereference of mgmt_chann
mgmt_chann may be set to NULL if the firmware returns an unexpected
error in aie2_send_mgmt_msg_wait(). This can later lead to a NULL
pointer dereference in aie2_hw_stop().
Fix this by introducing a dedicated helper to destroy mgmt_chann
and by adding proper NULL checks before accessing it.
A flaw was found in the Linux kernel's accel/amdxdna component. An unexpected firmware error during message handling can cause a critical communication variable (mgmt_chann) to be set to NULL. This can lead to a NULL pointer dereference when the system attempts to stop hardware operations, resulting in a Denial o
Debian
CVE-2026-23328: linux - In the Linux kernel, the following vulnerability has been resolved: accel/amdxd...
vendor_debian·2026
CVE-2026-23328 [LOW] CVE-2026-23328: linux - In the Linux kernel, the following vulnerability has been resolved: accel/amdxd...
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix NULL pointer dereference of mgmt_chann mgmt_chann may be set to NULL if the firmware returns an unexpected error in aie2_send_mgmt_msg_wait(). This can later lead to a NULL pointer dereference in aie2_hw_stop(). Fix this by introducing a dedicated helper to destroy mgmt_chann and by adding proper NULL checks before accessing it.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved (fixed in 6.19.8-1)
sid: resolved (fixed in 6.19.8-1)
trixie: resolved
No detection rules found.
No public exploits indexed.
2026-03-25
Published