A race condition in the Linux kernel amdxdna driver can result in use-after-free vulnerabilities and system crashes during job scheduling.

The issue exists because the driver continues to schedule jobs on a hardware context while it is undergoing resource release via aie2_release_resource(). This overlap leads to a use-after-free condition when the scheduler accesses resources that have already been freed.

The vulnerability could lead to system instability or arbitrary code execution if an attacker can reliably trigger the race condition. Given the CVSS score of 7.8, this flaw represents a significant risk to systems using AMD XDNA hardware, potentially impacting system availability and integrity.

Immediate Action: Update to the latest stable kernel version that includes the patch to synchronize job scheduling with resource release.

Proactive Monitoring: Monitor for kernel panics or "use-after-free" warnings in the dmesg logs.

Compensating Controls: Restrict access to the hardware accelerator devices to authorized processes to minimize the window of opportunity for exploitation.

Public Exploit Available: false

Given the potential for kernel-level crashes and memory corruption, administrators should treat this update as high priority. Ensure all systems utilizing affected hardware are patched to prevent exploitation of this race condition.