CVE-2026-23288
kernel: accel/amdxdna: Fix out-of-bounds memset in command slot handling
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · March 25, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's accel/amdxdna component. This vulnerability occurs when clearing a command header with memset() before verifying the available slot space, which can be smaller than the header size. This can lead to an out-of-bounds write and memory corruption. An attacker could potentially exploit this to cause a denial of service or other unpredictable system behavior.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-131 · Incorrect Calculation of Buffer Size