The Linux kernel AMD XDNA accelerator driver contained a vulnerability where the function aie_destroy_context() was called during error handling in aie2_create_context(). This function assumed the mailbox channel pointer was always non-NULL, but if mailbox channel creation failed, the pointer remained NULL. Calling aie_destroy_context() in this state could cause a NULL pointer dereference, leading to a denial of service via system crash. The fix involved replacing aie_destroy_context() with a function that requests firmware to remove the previously created context, preventing the NULL pointer dereference.

The vulnerability results in a NULL pointer dereference that can cause a denial of service by crashing the affected system. There is no impact on confidentiality or integrity. The attack vector requires local access with low privileges and no user interaction is needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vulnerability description indicates a fix has been implemented in the Linux kernel source code by replacing the vulnerable cleanup function. Users should monitor official Linux kernel advisories and update to a fixed kernel version once available.