CVE Database›CVE-2026-23288

CVE-2026-23288

kernel: accel/amdxdna: Fix out-of-bounds memset in command slot handling

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · March 25, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's accel/amdxdna component. This vulnerability occurs when clearing a command header with memset() before verifying the available slot space, which can be smaller than the header size. This can lead to an out-of-bounds write and memory corruption. An attacker could potentially exploit this to cause a denial of service or other unpredictable system behavior.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-131 · Incorrect Calculation of Buffer Size