CVE-2026-23341: 
Linux Debian vulnerability analysis and mitigation

CVE-2026-23341 is a NULL pointer dereference vulnerability in the Linux kernel's AMD XDNA accelerator driver (accel/amdxdna). It occurs in the aie2_destroy_context() function when userspace issues an ioctl to destroy a hardware context that has already been automatically suspended, causing a kernel crash due to an unvalidated NULL mailbox channel pointer. The vulnerability affects Linux kernel versions 6.19.4 through 6.19.6. It was disclosed on March 25, 2026, and carries a CVSS v3.1 base score of 5.5 (Medium) (Red Hat Advisory, Red Hat Bugzilla).

The root cause is a NULL pointer dereference (CWE-476) in the aie2_destroy_context() function within the AMD XDNA accelerator driver. When a hardware context is automatically suspended by the driver, its mailbox channel pointer is set to NULL. If userspace subsequently issues an ioctl to destroy that context, the driver accesses the NULL pointer without first validating it, triggering a kernel crash. The fix involves adding a NULL check for the mailbox channel pointer in aie2_destroy_context() before any access. Patch commits are available at the upstream kernel stable tree (Red Hat Bugzilla, Kernel Patch 1, Kernel Patch 2).

Successful exploitation results in a kernel crash, causing a denial-of-service (DoS) condition that affects system availability. An unprivileged local attacker with low privileges can trigger the crash by issuing a specific ioctl call targeting a suspended AMD XDNA hardware context. There is no impact on confidentiality or integrity, and no evidence of lateral movement potential beyond the DoS condition (Red Hat Advisory).

No public proof-of-concept exploit code is known to exist, and there is no evidence of active in-the-wild exploitation. The vulnerability requires local access with low privileges and no user interaction. The EPSS score is approximately 0.018% (0.000180), indicating a very low probability of exploitation in the near term. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog (Red Hat Advisory).

Update the Linux kernel to version 6.19.7 or later, or to Linux 7.0-rc2 or later, where the fix has been applied. The patch adds a NULL check for the mailbox channel pointer in aie2_destroy_context() before it is accessed. For systems where immediate patching is not feasible, restricting local user access to systems with AMD XDNA accelerators running affected kernel versions (6.19.4–6.19.6) is a recommended interim measure (Kernel Patch 1, Kernel Patch 2).