Linux Kernel Vulnerability in AMD XDNA Command Slot Handling

CVE-2026-23288

What is CVE-2026-23288?

The vulnerability in the Linux kernel pertains to the AMD XDNA component, where an out-of-bounds write can occur in command slot handling. An oversight in the implementation allowed the command header to be cleared using memset() before confirming the available space in the command slot. This could result in a memory corruption scenario. The resolution involved moving the memset() operation to after the size validation to prevent such occurrences, thereby enhancing the security of the system.

References