CVE-2026-72332 is a deadlock vulnerability in the Linux kernel's amdxdna driver related to power management resume operations. Specifically, amdxdna_hwctx_sync_debug_bo() held the xdna->dev_lock while invoking a hardware callback that could call amdxdna_cmd_submit(), which in turn calls amdxdna_pm_resume_get(). If the device was suspended, amdxdna_pm_resume_get() synchronously executes amdxdna_pm_resume(), which also tries to acquire xdna->dev_lock, resulting in a deadlock. The vulnerability was fixed by restructuring the code to call amdxdna_pm_resume_get() before acquiring xdna->dev_lock in both amdxdna_hwctx_sync_debug_bo() and amdxdna_drm_config_hwctx_ioctl(), thus preventing the deadlock condition.

The vulnerability could cause a system deadlock during power management resume operations involving the amdxdna driver, potentially leading to a hung system or degraded functionality. There is no indication of code execution or privilege escalation. No known exploits in the wild have been reported.

A fix has been implemented in the Linux kernel to prevent this deadlock by changing the order of lock acquisition and resume calls. Users should update to the fixed kernel version containing this patch. Since this is a kernel-level fix, applying the official kernel update from the vendor or distribution is the recommended remediation. Patch status is not explicitly provided here; check the vendor advisory or Linux kernel changelogs for the exact fixed version.