Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-08-22T00:00:00 kernel: accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages() 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CWE-911

In the Linux kernel, the following vulnerability has been resolved: accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages() Two error paths in amdxdna_insert_pages() called vma->vm_ops->close(vma) before returning an error code to the caller. This is incorrect: amdxdna_gem_obj_mmap() registers an HMM interval notifier before calling amdxdna_insert_pages(), and on a hard error it jumps to hmm_unreg to undo that registration. Calling vm_ops->close() manually — which drops the shmem pages_pin_count and the GEM object reference that backs the VMA — before the mmap syscall has even returned causes those resources to be released while the VMA is still alive. The kernel VMA teardown will call vm_ops->close() a second time when the process later unmaps the range, producing a reference count underflow. Replace both hard-error returns with a deferred-fault approach that keeps the VMA alive and retries page insertion through the HMM range-fault path.

A flaw was found in the Linux kernel's `accel/amxdna` component. Specifically, an error in the `amdxdna_insert_pages()` function causes system resources to be released too early. This premature release can lead to a critical error when the system later attempts to free the same resources, resulting in a reference count underflow. This vulnerability could allow a local attacker to cause the system to crash, leading to a denial of service.

Red Hat Enterprise Linux 10 Not affected kernel Red Hat Enterprise Linux 6 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel-rt Red Hat Enterprise Linux 8 Not affected kernel Red Hat Enterprise Linux 8 Not affected kernel-rt Red Hat Enterprise Linux 9 Not affected kernel Red Hat Enterprise Linux 9 Not affected kernel-rt https://www.cve.org/CVERecord?id=CVE-2026-74721 https://nvd.nist.gov/vuln/detail/CVE-2026-74721 https://lore.kernel.org/linux-cve-announce/2026082240-CVE-2026-74721-18a0@gregkh/T