Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-23288

accel/amdxdna: Fix out-of-bounds memset in command slot handling

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix out-of-bounds memset in command slot handling The remaining space in a command slot may be smaller than the size of the command header. Clearing the command header with memset() before verifying the available slot space can result in an out-of-bounds write and memory corruption. Fix this by moving the memset() call after the size validation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 13ae1a6000f7d8b09478e3128e87d45e89c7282f to < cca770d710d5e03bc814af585cd6975eb6d74074affected
  • 3d32eb7a5ecff92d83a5fd34c45c171c17d3d5d0 to < 1110a949675ebd56b3f0286e664ea543f745801caffected

Linux Linux

Default version status: unaffected

  • 6.19.4 to < 6.19.7affected

References