Live › vulnerability › CVE-2026-98436
Go to dashboardThe Linux kernel's amdxdna accelerator driver let device buffers be exported, which the driver was never meant to allow. The fix disables buffer exporting, so the sources describe no concrete attacker outcome beyond that.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running a Linux kernel with the AMD XDNA (Ryzen AI NPU) accel driver loaded are in scope. Systems without AMD XDNA hardware or with the driver not loaded can skip it. The sources do not say how an attacker would reach the export path.
No product ranges from the sources yet.
uname -r to get the running kernel version, then compare it against the fixed kernel release in the upstream stable advisorylsmod | grep amdxdnaEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
accel/amdxdna: Disable device buffer exporting
Device buffers are never intended to be exported. Disable exporting support explicitly.
This page as .md · .json · in your agent: get_signal("CVE-2026-98436")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.