{"id":"CVE-2026-98436","kind":"vulnerability","aliases":["CVE-2026-98436"],"related":[],"title":"Linux kernel: AMD XDNA accelerator driver allowed exporting device buffers","description":"In the Linux kernel, the following vulnerability has been resolved:\n\naccel/amdxdna: Disable device buffer exporting\n\nDevice buffers are never intended to be exported. Disable exporting\nsupport explicitly.","summary":"The Linux kernel's amdxdna accelerator driver let device buffers be exported, which the driver was never meant to allow. The fix disables buffer exporting, so the sources describe no concrete attacker outcome beyond that.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd-xdna","infrastructure","kernel","linux","self-hosted"],"not_affected_if":["driver-not-loaded","no-amd-xdna-hardware"],"how_to_check":"- `uname -r` to get the running kernel version, then compare it against the fixed kernel release in the upstream stable advisory\n- Check whether the amdxdna driver is loaded with `lsmod | grep amdxdna`","fix":"- Update to a Linux kernel release that includes the upstream commit disabling device buffer exporting in accel/amdxdna (exact versions unknown)","status":"open","published_at":"2026-10-18T15:16:53+00:00","first_seen_at":"2026-10-23T21:57:15+00:00","triaged_at":"2026-10-25T05:27:36+00:00","updated_at":"2026-10-25T05:27:36+00:00","category":"infrastructure","confidence":0.3,"triage":{"at":"2026-10-25T05:27:36Z","model":"claude-haiku-5-5","output":{"fix":"- Update to a Linux kernel release that includes the upstream commit disabling device buffer exporting in accel/amdxdna (exact versions unknown)","reach":"local","title":"Linux kernel: AMD XDNA accelerator driver allowed exporting device buffers","impact":"low","summary":"The Linux kernel's amdxdna accelerator driver let device buffers be exported, which the driver was never meant to allow. The fix disables buffer exporting, so the sources describe no concrete attacker outcome beyond that.","category":"infrastructure","nicknames":[],"who_cares":["linux","kernel","amd-xdna","self-hosted"],"confidence":0.3,"needs_auth":"unknown","worst_case":"unknown; the sources only describe disabling buffer export","analyst_note":"Check the NVD entry and the upstream kernel stable commit for the affected and fixed versions, and whether the export path is reachable by unprivileged local users.","how_to_check":"- `uname -r` to get the running kernel version, then compare it against the fixed kernel release in the upstream stable advisory\n- Check whether the amdxdna driver is loaded with `lsmod | grep amdxdna`","needs_analyst":true,"not_affected_if":["no-amd-xdna-hardware","driver-not-loaded"],"who_is_affected":"Systems running a Linux kernel with the AMD XDNA (Ryzen AI NPU) accel driver loaded are in scope. Systems without AMD XDNA hardware or with the driver not loaded can skip it. The sources do not say how an attacker would reach the export path.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000623,"input_tokens":3284,"output_tokens":589,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-98436':13A,16A 'accel/amdxdna':70C 'acceler':5A,31B 'allow':7A,45B 'amd':3A,18B 'amd-xdna':17B 'amdxdna':30B 'attack':57B 'beyond':59B 'buffer':10A,35B,49B,73C,76C 'concret':56B 'cve':11A,14A 'describ':54B 'devic':9A,34B,72C,75C 'disabl':48B,71C,83C 'driver':6A,32B,40B 'explicit':86C 'export':8A,37B,50B,74C,82C,84C 'fix':47B 'follow':65C 'host':25B 'infrastructur':20B 'intend':79C 'kernel':2A,21B,28B,63C 'let':33B 'linux':1A,22B,27B,62C 'meant':43B 'never':42B,78C 'outcom':58B 'resolv':69C 'self':24B 'self-host':23B 'sourc':53B 'support':85C 'vulner':66C 'xdna':4A,19B","nicknames":[],"mitigations":[],"who_affected":"Systems running a Linux kernel with the AMD XDNA (Ryzen AI NPU) accel driver loaded are in scope. Systems without AMD XDNA hardware or with the driver not loaded can skip it. The sources do not say how an attacker would reach the export path.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T15:16:53+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98436","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98436","severity":null,"published_at":"2026-10-18T15:16:53+00:00","modified_at":"2026-10-19T10:18:51+00:00","first_seen_at":"2026-10-23T21:57:15+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}