EUVD-2026-67484

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When forceiova mode is enabled, amdxdnaremove frees xdna-domain. If amdxdnagemobjfree is called after device removal, it may attempt to access xdna-domain,...

CVE-2026-80608 accel/amdxdna: Fix iommu domain lifetime race during device removal

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When forceiova mode is enabled, amdxdnaremove frees xdna-domain. If amdxdnagemobjfree is called after device removal, it may attempt to access xdna-domain,...

CVE-2026-74716

A flaw was found in the Linux kernel's amdxdna graphics driver. An unprivileged local user could exploit a vulnerability in how the driver handles memory management operations. By performing specific memory mapping and access patterns, a user could trigger an assertion failure, leading to a syste...

SUSE CVE-2026-74716

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix locally exploitable BUGON in amdxdnainsertpages In amdxdnainsertpages, vmflagsmod sets VMMIXEDMAP and clears VMPFNMAP. If an unprivileged userspace process mmaps a non-imported GEM object and then calls...

SUSE CVE-2026-74721

In the Linux kernel, the following vulnerability has been resolved: accel/amxdna: Fix page-insertion errors in amdxdnainsertpages Two error paths in amdxdnainsertpages called vma-vmops-closevma before returning an error code to the caller. This is incorrect: amdxdnagemobjmmap registers an HMM...

CVE-2026-74721

In the Linux kernel, the following vulnerability has been resolved: accel/amxdna: Fix page-insertion errors in amdxdnainsertpages Two error paths in amdxdnainsertpages called vma-vmops-closevma before returning an error code to the caller. This is incorrect: amdxdnagemobjmmap registers an HMM...

CVE-2026-74716

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix locally exploitable BUGON in amdxdnainsertpages In amdxdnainsertpages, vmflagsmod sets VMMIXEDMAP and clears VMPFNMAP. If an unprivileged userspace process mmaps a non-imported GEM object and then calls...

CVE-2026-74721

In the Linux kernel, the following vulnerability has been resolved: accel/amxdna: Fix page-insertion errors in amdxdnainsertpages Two error paths in amdxdnainsertpages called vma-vmops-closevma before returning an error code to the caller. This is incorrect: amdxdnagemobjmmap registers an HMM...

CVE-2026-74721 accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages()

In the Linux kernel, the following vulnerability has been resolved: accel/amxdna: Fix page-insertion errors in amdxdnainsertpages Two error paths in amdxdnainsertpages called vma-vmops-closevma before returning an error code to the caller. This is incorrect: amdxdnagemobjmmap registers an HMM...

CVE-2026-74716

This vulnerability affects the Linux kernel in the accel/amdxdna driver. The root cause is in amdxdna_insert_pages(), where vm_flags_mod() sets VM_MIXEDMAP and clears VM_PFNMAP. An unprivileged local user can mmap a non-imported GEM object, call madvise(MADV_DONTNEED) to clear PTEs, then trigger ...

CVE-2026-74716 accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages()

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix locally exploitable BUGON in amdxdnainsertpages In amdxdnainsertpages, vmflagsmod sets VMMIXEDMAP and clears VMPFNMAP. If an unprivileged userspace process mmaps a non-imported GEM object and then calls...

CVE-2026-74716 accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages()

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix locally exploitable BUGON in amdxdnainsertpages In amdxdnainsertpages, vmflagsmod sets VMMIXEDMAP and clears VMPFNMAP. If an unprivileged userspace process mmaps a non-imported GEM object and then calls...

EUVD-2026-64403

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix locally exploitable BUGON in amdxdnainsertpages In amdxdnainsertpages, vmflagsmod sets VMMIXEDMAP and clears VMPFNMAP. If an unprivileged userspace process mmaps a non-imported GEM object and then calls...

PT-2026-79721

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix locally exploitable BUG ON in amdxdna insert pages In amdxdna insert pages, vm flags mod sets VM MIXEDMAP and clears VM PFNMAP. If an unprivileged userspace process mmaps a non-imported GEM object and then call...

Linux Distros Unpatched Vulnerability : CVE-2026-74716

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: Fix locally exploitable BUGON in amdxdnainsertpages In amdxdnainsertpages, vmflagsmod sets VMMIXEDMAP and clears VMPFNMAP. If an unprivileged...

CVE-2026-72328

A flaw was found in the Linux kernel's accel/amdxdna component. A race condition exists where the aie2populaterange function can attempt to use an amdxdnaumap object that is simultaneously being released. This concurrent access may lead to a use-after-free vulnerability, which could result in...

CVE-2026-72331

A flaw was found in the accel/amdxdna component of the Linux kernel. The aie2populaterange and amdxdnaumaprelease functions access a saved Virtual Memory Area VMA pointer that may have already been freed. This race condition can lead to a use-after-free vulnerability, which could result in system...

Linux Distros Unpatched Vulnerability : CVE-2026-72093

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: Fix use-after-free in amdxdnagemdmabufmmap When vminsertpages fails, the error path calls vma-vmops-closevma which internally calls drmgemvmclose...

Linux Distros Unpatched Vulnerability : CVE-2026-72092

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: reject command submission on devices without a submit op amdxdnacmdsubmit calls xdna-devinfo-ops-cmdsubmit unconditionally, but only aie2devops...

Linux Distros Unpatched Vulnerability : CVE-2026-74423

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: Fix leak when pinning ubuf pages When pinuserpagesfast returns fewer pages than requested, the pages that were successfully pinned are not...