SUSE CVE-2026-72092

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject command submission on devices without a submit op amdxdnacmdsubmit calls xdna-devinfo-ops-cmdsubmit unconditionally, but only aie2devops defines that callback. aie4vfops the AIE4 SR-IOV virtual function does...

SUSE CVE-2026-80608

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When forceiova mode is enabled, amdxdnaremove frees xdna-domain. If amdxdnagemobjfree is called after device removal, it may attempt to access xdna-domain,...

EUVD-2026-67484

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When forceiova mode is enabled, amdxdnaremove frees xdna-domain. If amdxdnagemobjfree is called after device removal, it may attempt to access xdna-domain,...

CVE-2026-80608

This Linux kernel vulnerability affects the accel/amdxdna driver (AMD XDNA accelerator). When force_iova mode is enabled, a race condition exists during device removal: amdxdna_remove() frees the xdna->domain IOMMU domain, and a subsequent call to amdxdna_gem_obj_free() may access that freed m...

SUSE CVE-2026-72091

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject user command submission without a command BO amdxdnadrmsubmitexecbuf passes the user-supplied command BO handle straight into amdxdnacmdsubmit with drvcmd == NULL. When the handle is AMDXDNAINVALIDBOHANDLE 0...

The vulnerability of the amdxdna_get_ubuf() function in the drivers/accel/amdxdna/amdxdna_ubuf.c driver for Linux kernel-based computing devices allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdxdnagetubuf function in the drivers/accel/amdxdna/amdxdnaubuf.c driver for Linux kernel-based computing devices involves allowing operations to go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

CVE-2026-74716

A flaw was found in the Linux kernel's amdxdna graphics driver. An unprivileged local user could exploit a vulnerability in how the driver handles memory management operations. By performing specific memory mapping and access patterns, a user could trigger an assertion failure, leading to a syste...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Rejected user command submissions without a command BO. The amdxdnadrmsubmitexecbuf function passes the user-supplied command BO handle directly into amdxdnacmdsubmit, with drvcmd == NULL. When the handle is...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fixed a leak that occurred when pinning ubuf pages. When the pinuserpagesfast function returns a number of pages that is less than requested, the pages that were successfully pinned are not released, resulting in a...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: This vulnerability prevents a deadlock in the PM resume process during the hwctxsyncdebugbo function. The amdxdnahwctxsyncdebugbo function invokes the hardware hwctxsyncdebugbo callback while holding the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: accel/amdxdna: Fixed the VMA access race condition. aie2populaterange and amdxdnaumaprelease access a saved VMA pointer that may have already been freed, resulting in a potential use-after-free. VMA accesses by these functions...

CVE-2026-74721 accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages()

In the Linux kernel, the following vulnerability has been resolved: accel/amxdna: Fix page-insertion errors in amdxdnainsertpages Two error paths in amdxdnainsertpages called vma-vmops-closevma before returning an error code to the caller. This is incorrect: amdxdnagemobjmmap registers an HMM...

Linux Distros Unpatched Vulnerability : CVE-2026-74716

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: Fix locally exploitable BUGON in amdxdnainsertpages In amdxdnainsertpages, vmflagsmod sets VMMIXEDMAP and clears VMPFNMAP. If an unprivileged...

CVE-2026-74419

A flaw was found in the accel/amdxdna driver in the Linux kernel. This vulnerability occurs due to improper handling of user-provided buffer sizes when copying data from kernel space to user space. A local attacker could exploit this by providing a buffer smaller than the expected data size,...

CVE-2026-72331

A flaw was found in the accel/amdxdna component of the Linux kernel. The aie2populaterange and amdxdnaumaprelease functions access a saved Virtual Memory Area VMA pointer that may have already been freed. This race condition can lead to a use-after-free vulnerability, which could result in system...

Linux Distros Unpatched Vulnerability : CVE-2026-72093

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: Fix use-after-free in amdxdnagemdmabufmmap When vminsertpages fails, the error path calls vma-vmops-closevma which internally calls drmgemvmclose...

Linux Distros Unpatched Vulnerability : CVE-2026-74423

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: Fix leak when pinning ubuf pages When pinuserpagesfast returns fewer pages than requested, the pages that were successfully pinned are not...

Linux Distros Unpatched Vulnerability : CVE-2026-74419

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: Adjust size for copytouser The amount of data returned to user space should be limited by the buffer size provided by the application. If the...

CVE-2026-72090

A flaw was found in the Linux kernel's amdxdna graphics acceleration driver. A local user could exploit an incorrect client handling issue within the amdxdnadrmsyncboioctl function. When performing a SYNCDIRECTFROMDEVICE operation, the amdxdnahwctxsyncdebugbo function is called with an incorrect...

CVE-2026-74419

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Adjust size for copytouser The amount of data returned to user space should be limited by the buffer size provided by the application. If the buffer is smaller than the data size, return only the portion that fits...