Skip to main content

Linux EUVDEUVD-2026-18645

| CVE-2026-23424 HIGH
2026-04-03 Linux GHSA-mhv3-v49w-phxv
Linux Information Disclosure Red Hat Suse
7.1
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.1 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
SUSE
HIGH
qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
High

Lifecycle Timeline

8
Re-analysis Queued
Apr 27, 2026 - 14:22 vuln.today
cvss_changed
Severity Changed
Apr 27, 2026 - 14:22 NVD
MEDIUM HIGH
CVSS changed
Apr 27, 2026 - 14:22 NVD
5.5 (MEDIUM) 7.1 (HIGH)
CVSS changed
Apr 23, 2026 - 21:11 NVD
5.5 (MEDIUM)
Patch available
Apr 16, 2026 - 05:29 EUVD
3464e751755172ddbb849c1bd92f5f59e95c59a1,901ec3470994006bc8dd02399e16b675566c3416,3ed2ae6b3fe869f99b75afd02045ba5c0c0773e2
EUVD ID Assigned
Apr 03, 2026 - 13:45 euvd
EUVD-2026-18645
Analysis Generated
Apr 03, 2026 - 13:45 vuln.today
CVE Published
Apr 03, 2026 - 13:24 nvd
N/A

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

accel/amdxdna: Validate command buffer payload count

The count field in the command header is used to determine the valid payload size. Verify that the valid payload does not exceed the remaining buffer space.

AnalysisAI

Linux kernel accel/amdxdna driver fails to validate command buffer payload count, allowing out-of-bounds reads in AMD XDNA accelerator command processing. The vulnerability affects the accel/amdxdna subsystem across unspecified Linux kernel versions and permits information disclosure through unvalidated payload size interpretation. No active exploitation, public proof-of-concept, or CVSS data currently available.

Technical ContextAI

The AMD XDNA accelerator driver (accel/amdxdna) in the Linux kernel processes command buffers with a header containing a count field that specifies payload size. The vulnerable code path reads this count field without verifying that the referenced payload remains within allocated buffer boundaries. This is a classic out-of-bounds access vulnerability in kernel driver memory management, allowing reads beyond intended buffer limits. The root cause is insufficient input validation of user-supplied command structures before dereferencing payload pointers, falling under CWE classes related to improper input validation and buffer handling.

RemediationAI

Apply upstream kernel patches referencing commits 3464e751755172ddbb849c1bd92f5f59e95c59a1, 3ed2ae6b3fe869f99b75afd02045ba5c0c0773e2, or 901ec3470994006bc8dd02399e16b675566c3416 from the Linux kernel stable branch (https://git.kernel.org/stable/). These commits add validation to ensure the command buffer payload count does not exceed remaining buffer space. System administrators should update their Linux kernel to a version incorporating these fixes, available through kernel.org stable releases or their distribution's kernel update mechanism. Until patched, restrict access to AMD XDNA accelerator command submission to trusted processes.

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Vendor StatusVendor

SUSE

Severity: High
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed

Share

EUVD-2026-18645 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy