High 7.8Published May 27, 2026

CVE-2026-45980accel/amdxdna: Stop job scheduling across aie2_release_resource()

Updated under an hour ago (Oct 26, 2026, 4:50 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Stop job scheduling across aie2_release_resource() Running jobs on a hardware context while it is in the process of releasing resources can lead to use-after-free and crashes. Fix this by stopping job scheduling before calling aie2_release_resource() and restarting it after the release completes. Additionally, aie2_sched_job_run() now checks whether the hardware context is still active.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 4fd6ca90fc7f509977585d39885f21b2911123f3 before b79d31dce49b50c79620389b3639280802a86960; from 4fd6ca90fc7f509977585d39885f21b2911123f3 before 688c3ff079b10e4600f040944430d3d4ff448a15; from 4fd6ca90fc7f509977585d39885f21b2911123f3 before f1370241fe8045702bc9d0812b996791f0500f1b; 36f781a3f0deac92f169416997a17e73538cf470; from 6.14.9 before 6.15	CNA record
linux linux_kernel linux:linux_kernel	from 6.14.9 before 6.18.14; from 6.19 before 6.19.4	NVD

References

References

https://git.kernel.org/stable/c/b79d31dce49b50c79620389b3639280802a86960	patch
https://git.kernel.org/stable/c/688c3ff079b10e4600f040944430d3d4ff448a15	patch
https://git.kernel.org/stable/c/f1370241fe8045702bc9d0812b996791f0500f1b	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.