CVE-2025-68731

accel/amdxdna: Fix an integer overflow in aie2_query_ctx_status_array()

State
Published
Severity
Not scored
Published
Dec 24, 2025
Updated
May 11, 2026
Reserved
Dec 24, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

accel/amdxdna: Fix an integer overflow in aie2_query_ctx_status_array()

The unpublished smatch static checker reported a warning.

drivers/accel/amdxdna/aie2_pci.c:904 aie2_query_ctx_status_array() warn: potential user controlled sizeof overflow 'args->num_element * args->element_size' '1-u32max(user) * 1-u32max(user)'

Even this will not cause a real issue, it is better to put a reasonable limitation for element_size and num_element. Add condition to make sure the input element_size <= 4K and num_element <= 1K.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2f509fe6a42cda845890273fe759fb7ba9edad97 to before 359653edd5374fbba28f93043554dcc494aee85fAffected
  • 2f509fe6a42cda845890273fe759fb7ba9edad97 to before 9e16c8bf9aebf629344cfd4cd5e3dc7d8c3f7d82Affected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.2 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.