Riskcovery

CVE-2026-23424

accel/amdxdna: Validate command buffer payload count

State
Published
Severity
7.1 High
Published
Apr 3, 2026
Updated
Aug 5, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

accel/amdxdna: Validate command buffer payload count

The count field in the command header is used to determine the valid payload size. Verify that the valid payload does not exceed the remaining buffer space.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • aac243092b707bb3018e951d470cc1a9bcbaba6c to before 3464e751755172ddbb849c1bd92f5f59e95c59a1Affected
  • aac243092b707bb3018e951d470cc1a9bcbaba6c to before 3ed2ae6b3fe869f99b75afd02045ba5c0c0773e2Affected
  • aac243092b707bb3018e951d470cc1a9bcbaba6c to before 901ec3470994006bc8dd02399e16b675566c3416Affected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.18.17 through 6.18.*Not affected
  • 6.19.7 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.