CVE-2026-80608

A use-after-free race condition exists in the Linux kernel's accel/amdxdna driver for AMD XDNA NPU accelerators: when force_iova mode is enabled, amdxdna_remove() frees the device's IOMMU domain, and a subsequent amdxdna_gem_obj_free() call may then access that already-freed domain. The flaw is triggered during device removal or driver teardown when DRM GEM buffer objects are released after the domain has been freed. A local attacker with low privileges could potentially exploit the resulting memory corruption for high-impact confidentiality, integrity, and availability loss (CVSS 8.8, scope changed), typically manifesting as a local privilege escalation or kernel crash. Affected systems are those running Linux kernels that ship the amdxdna driver on hardware with an AMD XDNA (Ryzen AI) NPU, with the race specifically requiring force_iova mode. No public proof-of-concept or in-the-wild exploitation is known, and EPSS estimates only ~0.1% probability of exploitation within 30 days.

What to do: Update the Linux kernel to a build that includes the upstream amdxdna fix once your distribution vendor ships it (no fixed version number was provided in the source data). Check whether the amdxdna module is loaded (e.g., 'lsmod | grep amdxdna') and whether force_iova is enabled; systems without an AMD XDNA NPU are not affected. As an interim measure, avoid unbinding or hot-removing the amdxdna device while DRM/GEM buffers remain open.