Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When… (CVE-2026-80608)

CVE-2026-80608 addresses a use-after-free vulnerability in the Linux kernel's amdxdna driver related to iommu domain lifetime management during device removal. When force_iova mode is enabled, amdxdna_remove() frees the xdna->domain resource. If amdxdna_gem_obj_free() is called after device removal, it may access the freed xdna->domain, causing a use-after-free condition. The race condition is resolved by making the freeing of xdna->domain a managed release action under DRM, ensuring the domain remains valid until all managed resources are released.

The vulnerability allows a local attacker with limited privileges to exploit a race condition leading to use-after-free, potentially resulting in system instability, privilege escalation, or arbitrary code execution. The CVSS score of 8.8 indicates high impact on confidentiality, integrity, and availability.

A fix has been implemented in the Linux kernel to manage the lifetime of xdna->domain properly. Users should apply the official kernel updates that include this patch. Since this is a kernel-level vulnerability, upgrading to a patched kernel version is the recommended mitigation. Patch status is not explicitly stated here; check the vendor or distribution advisory for the exact fixed versions and update instructions.