CVE-2026-80608

High

Description

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When force_iova mode is enabled, amdxdna_remove() frees xdna->domain. If amdxdna_gem_obj_free() is called after device removal, it may attempt to access xdna->domain, resulting in a use-after-free. Fix the race by adding freeing xdna->domain as a managed release action, so its lifetime is managed by DRM and remains valid until all managed resources are released.

SeverityHigh
CVSS8.8
Exploit probability—
ProductLinux
PublishedAug 28, 2026
First seenAug 28, 2026

How to fix

Update
  • Linux Linux65e7e2b8d71b418439ebc68e80ed3e5a325375d6, b4a0500fdf6e61a6c5f92ff2e61bc91578075803 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxece3e8980907818c72dc9faa7bbaf40488ef1824 ≤ v < 65e7e2b8d71b418439ebc68e80ed3e5a325375d6, ece3e8980907818c72dc9faa7bbaf40488ef1824 ≤ v < b4a0500fdf6e61a6c5f92ff2e61bc91578075803, 7.165e7e2b8d71b418439ebc68e80ed3e5a325375d6, b4a0500fdf6e61a6c5f92ff2e61bc91578075803

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-80608 · Linux · Dark Radar