CVE-2026-74419

A flaw was found in the accel/amdxdna driver in the Linux kernel. This vulnerability occurs due to improper handling of user-provided buffer sizes when copying data from kernel space to user space. A local attacker could exploit this by providing a buffer smaller than the expected data size, potentially leading to information disclosure of sensitive kernel memory or a denial of service.

This vulnerability is rated as Low impact for Red Hat Enterprise Linux because exploitation requires local access to an AMD neural processing unit and is limited to denial of service or constrained memory disclosure without direct privilege elevation. Furthermore, the affected accelerator driver was introduced in newer upstream kernels and is not included in supported Red Hat Enterprise Linux releases. Consequently, standard enterprise environments are not exposed to this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.