SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-80608

HIGH · CVSS 8.8 EPSS 0.12%

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's AMD GPU driver, specifically in the handling of IOMMU domain lifetimes during device removal. When the force_iova mode is enabled, a use-after-free condition may occur if certain functions are called post-device removal, potentially leading to system instability or crashes. Organizations utilizing affected Linux distributions with AMD GPUs should prioritize addressing this issue to ensure system reliability and security.

CVE
CVE-2026-80608
Severity
HIGH
CVSS
8.8
EPSS
0.12%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When force_iova mode is enabled, amdxdna_remove() frees xdna->domain. If amdxdna_gem_obj_free() is called after device removal, it may attempt to access xdna->domain, resulting in a use-after-free. Fix the race by adding freeing xdna->domain as a managed release action, so its lifetime is managed by DRM and remains valid until all managed resources are released.