---
id: CVE-2026-23328
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  accel/amdxdna: Fix NULL pointer dereference of mgmt_chann

  mgmt_chann may be set to NULL if the firmware returns an unexpected
  error in aie2_send_mgmt_msg_wait()
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  accel/amdxdna: Fix NULL pointer dereference of mgmt_chann

  mgmt_chann may be set to NULL if the firmware returns an unexpected
  error in aie2_send_mgmt_msg_wait(). This …
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-476
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 6.14.1, < 6.19.7'
  - linux_kernel = 6.14
  - linux_kernel = 7.0
patched:
  - linux_kernel 6.19.7
published: '2026-03-25'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T11:17:28.587'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-23328'
references:
  - url: 'https://git.kernel.org/stable/c/032ca7a9059c4ba6c329e0f1b442dab54dd9c3e5'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/6270ee26e1edd862ea17e3eba148ca8fb2c99dc9'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/6b3546e3a8c664fb8b97f587fd268dc6e413d79b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00107
epssPercentile: 0.01097
ingestedAt: '2026-10-15T11:00:41.715Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

accel/amdxdna: Fix NULL pointer dereference of mgmt_chann

mgmt_chann may be set to NULL if the firmware returns an unexpected
error in aie2_send_mgmt_msg_wait(). This can later lead to a NULL
pointer dereference in aie2_hw_stop().

Fix this by introducing a dedicated helper to destroy mgmt_chann
and by adding proper NULL checks before accessing it.

## Affected

- `linux_kernel >= 6.14.1, < 6.19.7`
- `linux_kernel = 6.14`
- `linux_kernel = 7.0`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.19.7`