Executive brief
The AMD XDNA accelerator driver for Linux contains a deadlock vulnerability in its power management code. When firmware debug operations are performed on a suspended device, the driver can deadlock due to conflicting lock acquisition order. This causes system hangs that can disrupt workloads running on the accelerator.
Technical details
The vulnerability is a classic lock-ordering deadlock (CWE-833) in the amdxdna driver's debug buffer synchronization code. The amdxdna_hwctx_sync_debug_bo() and amdxdna_drm_config_hwctx_ioctl() functions acquire xdna->dev_lock before calling amdxdna_pm_resume_get(), which may invoke amdxdna_pm_resume() if the device is suspended. Since amdxdna_pm_resume() also acquires xdna->dev_lock, a deadlock occurs. The fix reorders the calls to invoke amdxdna_pm_resume_get() before acquiring the mutex. The vulnerability is local, requiring direct access to the driver ioctl interface or debug operations. A patch is available in the upstream Linux kernel.
Affected products
- Linux Linux kernel 5.x and 6.x versions containing commit 7ea046838021
Timeline
- 2026-08-15: disclosed
- 2026-06-16: patched