Linux Kernel Reference Leak Vulnerability in AMD DNA Acceleration

Vulnerability

A reference leak vulnerability has been identified in the Linux kernel's AMD DNA acceleration component. The issue arises in the 'aie2_populate_range()' function, which fails to properly release a reference to the 'mm_struct' before jumping back to a previous label, leading to a memory leak. This vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability causes a memory leak by failing to release references to the 'mm_struct', which can lead to increased memory usage and potential exhaustion of memory resources.

Reproduction

The vulnerability can be reproduced by invoking the 'aie2_populate_range()' function within the AMD DNA acceleration context. The function will jump back to the 'again' label without releasing the 'mm_struct' reference, causing a leak. This behavior can be observed in the stable version of the Linux kernel.

Remediation

Users can upgrade to the latest version of the Linux kernel stable tree, where this vulnerability has been addressed. The specific commit that resolves the issue is '21dfec59939120b20d2c7794caaa421f9450be0a'.

Added: Jul 19, 2026, 3:22 PM
Updated: Jul 19, 2026, 3:22 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.3
remediation
7.7
relevance
10.0
threat
4.8
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.