CVE-2026-23063

uacce: ensure safe queue release with state management

published February 4, 2026

CVSS
—
EPSS
0%
Percentile
3.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

uacce: ensure safe queue release with state management

Directly calling `put_queue` carries risks since it cannot

guarantee that resources of `uacce_queue` have been fully released

beforehand. So adding a `stop_queue` operation for the

UACCE_CMD_PUT_Q command and leaving the `put_queue` operation to

the final resource release ensures safety.

Queue states are defined as follows:

- UACCE_Q_ZOMBIE: Initial state

- UACCE_Q_INIT: After opening `uacce`

- UACCE_Q_STARTED: After `start` is issued via `ioctl`

When executing `poweroff -f` in virt while accelerator are still

working, `uacce_fops_release` and `uacce_remove` may execute

concurrently. This can cause `uacce_put_queue` within

`uacce_fops_release` to access a NULL `ops` pointer. Therefore, add

state checks to prevent accessing freed pointers.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00144 · 3.4th percentile
Published
2026-02-04T16:07Z
EPSS history
Timeline
  • 04 FEB 16:07Z
    uacce: ensure safe queue release with state management
    cvelistv5