A null‑pointer dereference occurs in the Linux kernel AMD NPU driver when a user submits an EXEC_CMD ioctl with a command buffer handle of AMDXDNA_INVALID_BO_HANDLE (0) and no driver command. The driver fails to reject this invalid handle during the user submission path, causing the job to be queued with a NULL cmd_bo. Later scheduler processing dereferences the NULL pointer, leading to a kernel oops and a crash of the operating system. This loss of control allows a local attacker who can open the accelerator device node to trigger a denial of service. The weakness is a missing validation of user input, resulting in a null‑pointer dereference.

The kernel module affected is accel/amdxdna, part of the Linux kernel for AMD NPU devices. Any Linux kernel that loads this module and exposes the accelerator device node (e.g., /dev/dri/render*) may be impacted. No specific kernel version is given; the vulnerability applies to all kernels containing the affected code. Systems that do not load the amdxdna module or lack AMD NPU hardware are not affected.

The CVSS score of 5.5 indicates a moderate impact. EPSS <1% shows a very low probability of exploitation. The vulnerability can be triggered by a local user with access to the accelerator device node; no privilege escalation beyond the current user privileges is required. Although the attacker can cause a kernel crash, the impact is limited to the local machine and is mitigated by restricting device node access or disabling the driver. The vulnerability is not listed in the CISA KEV catalog.