CVE-2026-72090

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the accel/amdxdna component where the amdxdna drm sync bo ioctl() function incorrectly passes abo->client to amdxdna hwctx sync debug bo() during a SYNC DIRECT FROM DEVICE operation. The amdxdna hwctx sync debug bo() function utilizes the passed client as the handle namespace for debug bo hdl and as the owner of the hardware context xarray. Because the BO's stored client pointer represents object state rather than the ioctl context, it may not match the file that supplied the args->handle variable, leading to a mismatch in the handle namespace and hardware context ownership.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.