What is the CVSS score of EUVD-2026-59230?

EUVD-2026-59230 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Linux Kernel are affected by EUVD-2026-59230?

Organizations operating AMD XDna NPU accelerators on Linux systems face a kernel-level privilege escalation risk that could allow standard users to gain administrative control over affected systems.. A patch is available.

How to fix or mitigate EUVD-2026-59230?

Within 24 hours, identify systems with AMD XDna NPU hardware by auditing your Linux infrastructure for the amdxdna driver (check dmesg logs or run lspci) and document affected kernel versions. Within 7 days, deploy the vendor-released kernel patch to all identified systems, prioritizing production environments and systems with elevated access controls or sensitive data. Within 30 days, complete patch validation across all systems, verify the amdxdna driver is at a patched kernel version, and update your vulnerability management system to reflect remediation.

Linux Kernel EUVD-2026-59230

| CVE-2026-72331 HIGH

2026-08-15 Linux

GHSA-cj8g-gqgj-7r85

Information Disclosure Linux Red Hat Suse

7.8

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.0 HIGH

Race condition exploitation requires precise concurrent timing (AC:H); local low-privilege account and AMD XDna device access required (AV:L, PR:L); full kernel CIA impact if successful.

3.1 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SUSE

4.7 MEDIUM

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Red Hat

5.5 MEDIUM

qualitative

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 17, 2026 - 08:30 vuln.today

CVSS changed

Aug 17, 2026 - 06:22 NVD

7.8 (HIGH)

Patch available

Aug 15, 2026 - 07:20 EUVD

CVE Published

Aug 15, 2026 - 05:55 cve.org

HIGH 7.8

CVE Published

Aug 15, 2026 - 05:55 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

accel/amdxdna: Fix VMA access race

aie2_populate_range() and amdxdna_umap_release() access a saved VMA pointer that may have already been freed, leading to a potential use-after-free.

Remove the VMA accesses from these functions to avoid the race.

AnalysisAI

Use-after-free in the Linux kernel's accel/amdxdna driver exposes systems with AMD XDna NPU hardware to local privilege escalation by a low-privileged attacker. The race condition exists between aie2_populate_range() and amdxdna_umap_release(), both of which dereference a stale VMA pointer after the underlying virtual memory area may have been freed by the kernel memory manager. With EPSS at 0.20% (10th percentile), no CISA KEV listing, and no public exploit identified at time of analysis, active exploitation is not currently observed - though the CVSS 7.8 score correctly reflects the theoretical potential for full kernel compromise on affected hardware configurations.

Technical ContextAI

The affected code resides in the Linux kernel's accel/amdxdna subsystem, introduced to support AMD's XDna AI accelerator (Neural Processing Unit) present in newer AMD Ryzen AI platforms. The root cause is a Virtual Memory Area (VMA) lifecycle management flaw: both aie2_populate_range() and amdxdna_umap_release() cache a VMA pointer and later dereference it without verifying the memory region is still valid, creating a classic time-of-use versus time-of-check race condition. Though no CWE is officially assigned, the pattern maps precisely to CWE-416 (Use After Free) in conjunction with CWE-362 (Concurrent Execution Using Shared Resource with Improper Synchronization). CPE data identifies the affected product as cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:*, spanning Linux kernel builds that contain the amdxdna driver module starting from the introducing commit e486147c912f653ef4b60a6c7dbd4168a4c56a9f. The fix removes the VMA pointer accesses from these functions entirely, eliminating the race rather than adding a lock.

RemediationAI

Upgrade to Linux kernel 7.1.5 (stable release) or Linux 7.2-rc3 (mainline). The upstream fix commits are available at https://git.kernel.org/stable/c/1ba02717e821cf14ece642273958647e79698d3d and https://git.kernel.org/stable/c/bea20225c67fed9be3e98619c77af6ee3f43fe07 for manual backporting to out-of-tree or downstream kernels. For systems where kernel upgrade is not immediately feasible and AMD XDna hardware is not actively used, blocklisting the amdxdna module (adding 'blacklist amdxdna' to /etc/modprobe.d/blacklist.conf and regenerating initramfs) prevents module loading and eliminates the attack surface - this trade-off is that AMD NPU and AI accelerator functionality will be unavailable. On multi-tenant or shared systems where untrusted local users exist and NPU functionality must remain available, restrict access to the accelerator device node (typically /dev/accel/*) using DAC controls (chmod/chown or udev rules) so only authorized users or service accounts can interact with the driver until patching is complete.

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0	Not-Affected

EUVD-2026-59230 vulnerability details – vuln.today

Back

Linux Kernel EUVD-2026-59230

Severity by source

CVSS VectorVendor: Linux

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code