CVE-2026-72332 accel/amdxdna: Prevent PM resume deadlock in hwctx_sync_debug_bo()
A local attacker can trigger a deadlock in the AMD XDNA driver during power management resume, causing a system denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-72332?
CVE-2026-72332 is a vulnerability in Linux, published on 15 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
accel/amdxdna: Prevent PM resume deadlock in hwctx_sync_debug_bo()
amdxdna_hwctx_sync_debug_bo() invokes the hardware hwctx_sync_debug_bo() callback while holding xdna->dev_lock.
The callback may call amdxdna_cmd_submit(), which in turn calls amdxdna_pm_resume_get(). If the device is suspended, amdxdna_pm_resume_get() may synchronously execute amdxdna_pm_resume(), which also acquires xdna->dev_lock, resulting in a deadlock.
Avoid the deadlock by calling amdxdna_pm_resume_get() before holding xdna->dev_lock in both amdxdna_hwctx_sync_debug_bo() and amdxdna_drm_config_hwctx_ioctl()
Which versions are affected by CVE-2026-72332?
How do I fix CVE-2026-72332?
Apply the vendor's patch.
Is CVE-2026-72332 being exploited?
There is no known exploitation of CVE-2026-72332 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2026-72332, GHSA-g8r2-47gx-v4q8, UBUNTU-CVE-2026-72332.