---
id: CVE-2026-72091
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  accel/amdxdna: reject user command submission without a command BO

  amdxdna_drm_submit_execbuf() passes the user-supplied command BO handle
  straight into amdxdna_cmd_su…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  accel/amdxdna: reject user command submission without a command BO

  amdxdna_drm_submit_execbuf() passes the user-supplied command BO handle
  straight into amdxdna_cmd_su…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= aac243092b707bb3018e951d470cc1a9bcbaba6c <
    241cf3b7455bebbe492b9df4912b48e3260061d4
  - >-
    Linux >= aac243092b707bb3018e951d470cc1a9bcbaba6c <
    fff6509d976f6fae423a5236391ccdbd7e0e9f06
  - >-
    Linux >= aac243092b707bb3018e951d470cc1a9bcbaba6c <
    261c1fe3327ad24508f54552c6366e3e4db82c15
  - Linux 6.14
published: '2026-08-15'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T11:17:42.497'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-72091'
references:
  - url: 'https://git.kernel.org/stable/c/241cf3b7455bebbe492b9df4912b48e3260061d4'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/261c1fe3327ad24508f54552c6366e3e4db82c15'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/fff6509d976f6fae423a5236391ccdbd7e0e9f06'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00198
epssPercentile: 0.0888
ingestedAt: '2026-10-15T11:00:41.687Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

accel/amdxdna: reject user command submission without a command BO

amdxdna_drm_submit_execbuf() passes the user-supplied command BO handle
straight into amdxdna_cmd_submit() with drv_cmd == NULL. When the handle
is AMDXDNA_INVALID_BO_HANDLE (0), the block that fetches job->cmd_bo is
skipped, leaving it NULL, and no check rejects it on the user path (the
!job->cmd_bo guard lives inside the != INVALID branch).

The job is then armed and pushed to the DRM scheduler.
aie2_sched_job_run() takes the drv_cmd == NULL path and calls
amdxdna_cmd_set_state(job->cmd_bo) -> amdxdna_gem_vmap(NULL) ->
to_gobj(NULL)->dev, a NULL pointer dereference in the drm_sched worker.
A process with access to the accel node on a system with a probed AMD NPU
can trigger a kernel oops with a single AMDXDNA_EXEC_CMD ioctl
(cmd_handles = 0).

Only internal driver commands (SYNC_DEBUG_BO / ATTACH_DEBUG_BO)
legitimately pass AMDXDNA_INVALID_BO_HANDLE, and they always set drv_cmd.
Reject the invalid handle for user submissions (drv_cmd == NULL) at the
submit choke point so every user path is covered.

Found by 0sec automated security-research tooling (https://0sec.ai).

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.