A race condition in the AMD XDNA accelerator driver for the Linux kernel allows a locally privileged userspace program to submit commands during a brief autosuspend window. Because the driver’s rpm_on flag is still set when autosuspend is triggered, the resume operation can be inadvertently skipped, causing commands to be processed while the device has not fully resumed. This results in bad or unexpected device behavior, corruption of device state, or a denial of service to applications that rely on the accelerator.

All Linux kernel releases that include the accel/amdxdna driver (AMD XDNA accelerator) before the application of commit 00ffe45e… are affected. The vulnerability applies to any distribution that uses the default kernel configuration containing this driver. No specific kernel version range is listed, so any kernel versions lacking the patch are vulnerable.

The flaw requires local privileged access to the host and a very short window immediately after autosuspend is invoked, making exploitation unlikely. The EPSS score is under 1% and the vulnerability is not listed in the CISA KEV catalog. While it does not provide remote code execution, it can disrupt device operation and applications that depend on the accelerator. The overall risk is low to moderate, with a narrow attack window and limited impact confined to device functionality.