SB2026081547 - Out-of-bounds read in Linux kernel accel amdxdna driver

Description

This security bulletin contains information about 1 vulnerability.

1) Out-of-bounds read (CVE-ID: CVE-2026-74419)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to disclose sensitive information.

The vulnerability exists due to an out-of-bounds read in the amdxdna driver copy_to_user() handling when processing user-supplied buffer sizes for query and info requests. A local user can provide a smaller buffer size than the copied data size to disclose sensitive information.

The issue affects multiple amdxdna AIE query and information paths that copy kernel data to user space.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/097e57195ef813735c8b714d6503bf3ad0742515
• https://git.kernel.org/stable/c/6e87001fe19f251e2ae14373bc76554358a13df2