---
id: "CVE-2026-98436"
kind: "vulnerability"
aliases: ["CVE-2026-98436"]
title: "Linux kernel: AMD XDNA accelerator driver allowed exporting device buffers"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["amd-xdna", "infrastructure", "kernel", "linux", "self-hosted"]
not_affected_if: ["driver-not-loaded", "no-amd-xdna-hardware"]
published_at: "2026-10-18T15:16:53+00:00"
first_seen_at: "2026-10-23T21:57:15+00:00"
updated_at: "2026-10-25T05:27:36+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-98436", "first_seen_at": "2026-10-23T21:57:15+00:00"}]
---

# Linux kernel: AMD XDNA accelerator driver allowed exporting device buffers

The Linux kernel's amdxdna accelerator driver let device buffers be exported, which the driver was never meant to allow. The fix disables buffer exporting, so the sources describe no concrete attacker outcome beyond that.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- `uname -r` to get the running kernel version, then compare it against the fixed kernel release in the upstream stable advisory
- Check whether the amdxdna driver is loaded with `lsmod | grep amdxdna`

## Fix

- Update to a Linux kernel release that includes the upstream commit disabling device buffer exporting in accel/amdxdna (exact versions unknown)

## Timeline

- 2026-10-23T21:57:15+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-98436

## From the sources

In the Linux kernel, the following vulnerability has been resolved:

accel/amdxdna: Disable device buffer exporting

Device buffers are never intended to be exported. Disable exporting
support explicitly.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_