CVE-2026-23424: accel/amdxdna: Validate command buffer payload count
Published Apr 3, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
accel/amdxdna: Validate command buffer payload count
The count field in the command header is used to determine the valid payload size. Verify that the valid payload does not exceed the remaining buffer space.
Affected Software
11 affected components
Linux Linux kernel (accel/amdxdna)
Linux Linux kernel>=6.14.1<6.18.17
Linux Linux kernel>=6.19<6.19.7
Linux Linux kernel=6.14
Linux Linux kernel=7.0-rc1
Linux Linux kernel=7.0-rc2
Linux Linux kernel=7.0-rc3
Linux Linux kernel=7.0-rc4
Linux Linux kernel=7.0-rc5
Linux Linux kernel=7.0-rc6
Linux Linux kernel=7.0-rc7
Event History
Apr 3, 2026
CVE Published
via MITRE·01:24 PM
Data Sourced
via MITRE·01:24 PM
DescriptionSeverity
Data Sourced
via NVD·02:16 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-23424?
The severity of CVE-2026-23424 is high, rated at 7.1 on the CVSS scale.
2
How do I fix CVE-2026-23424?
To fix CVE-2026-23424, apply the available patch provided by the Linux kernel.
3
What software is affected by CVE-2026-23424?
CVE-2026-23424 affects the Linux kernel, specifically the accel/amdxdna component.
4
What type of vulnerability is CVE-2026-23424?
CVE-2026-23424 is a vulnerability that involves improper validation of the command buffer payload count.
5
When was CVE-2026-23424 published?
CVE-2026-23424 was published on April 3, 2026.