What is CVE-2026-23341?

CVE-2026-23341 is a medium-severity vulnerability in Linux, classified under NULL Pointer Dereference. CVSS score: 5.5/10. Published 2026-03-25.

How severe is CVE-2026-23341?

Medium severity. CVSS v3 base score is 5.5 out of 10.

NULL pointer dereference in Linux

CVE-2026-23341

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix crash when destroying a suspended hardware context If userspace issues an ioctl to destroy a hardware context that has already been automatically suspended, the driver may crash because the mailbox channel pointer is NULL for the suspended context. Fix this by checking the mailbox channel pointer in aie2_destroy_context() before accessing it.

EPSS: 0.001 (1.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Linux — versions 2611c9616cb52d3ed54a6095d72d18e645a6955a, 97f27573837ef96b4ba42af463cc800cab615c0e, 6.19.4
Linux Linux_kernel

Weakness classification (CWE)

CWE-476 — NULL Pointer Dereference

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2026-23341?: CVE-2026-23341 is a medium-severity vulnerability in Linux, classified under NULL Pointer Dereference. CVSS score: 5.5/10. Published 2026-03-25.
How severe is CVE-2026-23341?: Medium severity. CVSS v3 base score is 5.5 out of 10.