CVE-2026-72328: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix potential amdxdna_umap lifetime race amdxdna_umap_release() calls the blocking mmu_interval_notifier_remove() before removing the object from abo->mem.umap_list. If aie2_populate_range() runs concurrently, it may obtain a reference to an amdxdna_umap that is being released, leading to a potential use-after-free. Use kref_get_unless_zero() in aie2_populate_range() when acquiring a reference. If the reference count has already dropped to zero, release is in progress and the entry is skipped.

Засегнати продукти

• Linux Linux: e486147c912f653ef4b60a6c7dbd4168a4c56a9f преди 267809e2c56fbea486f7250c8a4acddcc3c54dc5; e486147c912f653ef4b60a6c7dbd4168a4c56a9f преди 91e8109ecffb925b6202d2737384df285b195bfb; e486147c912f653ef4b60a6c7dbd4168a4c56a9f преди 14f172eff9c19f8043a9858845f33cd034f3a41e
• Linux Linux: 6.16; преди 6.16; 6.18.40 до 6.18.*; 7.1.5 до 7.1.*; от 7.2 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-72328
• https://nvd.nist.gov/vuln/detail/CVE-2026-72328
• https://git.kernel.org/stable/c/267809e2c56fbea486f7250c8a4acddcc3c54dc5
• https://git.kernel.org/stable/c/91e8109ecffb925b6202d2737384df285b195bfb
• https://git.kernel.org/stable/c/14f172eff9c19f8043a9858845f33cd034f3a41e