Description
In the Linux kernel, the following vulnerability has been resolved:

accel/amdxdna: Fix race condition when checking rpm_on

When autosuspend is triggered, driver rpm_on flag is set to indicate that
a suspend/resume is already in progress. However, when a userspace
application submits a command during this narrow window,
amdxdna_pm_resume_get() may incorrectly skip the resume operation because
the rpm_on flag is still set. This results in commands being submitted
while the device has not actually resumed, causing unexpected behavior.

The set_dpm() is called by suspend/resume, it relied on rpm_on flag to
avoid calling into rpm suspend/resume recursivly. So to fix this, remove
the use of the rpm_on flag entirely. Instead, introduce aie2_pm_set_dpm()
which explicitly resumes the device before invoking set_dpm(). With this
change, set_dpm() is called directly inside the suspend or resume execution
path. Otherwise, aie2_pm_set_dpm() is called.
Published: 2026-05-27
Score: 4.7 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A race condition in the Linux kernel's AMD XDNA accelerator driver allows a userspace program to submit commands while the device has not yet fully resumed after an autosuspend. Because the rpm_on flag is still set, the resume path can be skipped, causing commands to be processed in an incomplete state. This can lead to unexpected device behavior or state corruption.

Affected Systems

All Linux kernel releases that include the accel/amdxdna driver before the commit 00ffe45e… are affected. Any distribution with the default kernel configuration containing this driver is impacted. Specific kernel version ranges are not listed.

Risk and Exploitability

The CVSS score of 4.7 classifies the vulnerability as low severity. With an EPSS score of <1% and no listing in the CISA KEV catalog, the likelihood of exploitation is very low. The flaw requires a brief local userspace operation during a suspend/resume cycle; it does not grant remote code execution or require elevated privileges. The primary risk is isolated to device operation and application stability.

Generated by OpenCVE AI on August 12, 2026 at 02:15 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the kernel to a version that includes commit 00ffe45e… where the race condition with rpm_on has been fixed.
  • If a kernel upgrade is not immediately possible, manually apply the patch to the kernel source, rebuild, and load the updated module.
  • As a temporary workaround, disable autosuspend for the AMD XDNA device or prevent userspace from issuing commands to the accelerator while a suspend/resume cycle is in progress.

Generated by OpenCVE AI on August 12, 2026 at 02:15 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 29 May 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-367
References

Wed, 27 May 2026 14:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix race condition when checking rpm_on When autosuspend is triggered, driver rpm_on flag is set to indicate that a suspend/resume is already in progress. However, when a userspace application submits a command during this narrow window, amdxdna_pm_resume_get() may incorrectly skip the resume operation because the rpm_on flag is still set. This results in commands being submitted while the device has not actually resumed, causing unexpected behavior. The set_dpm() is called by suspend/resume, it relied on rpm_on flag to avoid calling into rpm suspend/resume recursivly. So to fix this, remove the use of the rpm_on flag entirely. Instead, introduce aie2_pm_set_dpm() which explicitly resumes the device before invoking set_dpm(). With this change, set_dpm() is called directly inside the suspend or resume execution path. Otherwise, aie2_pm_set_dpm() is called.
Title accel/amdxdna: Fix race condition when checking rpm_on
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-05-27T12:14:51.799Z

Reserved: 2026-05-08T13:14:33.087Z

Link: CVE-2025-71303

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2026-05-27T14:16:42.733

Modified: 2026-06-25T21:04:45.110

Link: CVE-2025-71303

cve-icon Redhat

Severity :

Publid Date: 2026-05-27T00:00:00Z

Links: CVE-2025-71303 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-12T02:15:17Z

Weaknesses
  • CWE-362

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

  • CWE-367

    Time-of-check Time-of-use (TOCTOU) Race Condition