Local Memory Access Vulnerability in Linux Kernel Affecting AMD Graphics Drivers

CVE-2026-74716

What is CVE-2026-74716?

A vulnerability exists in the Linux kernel due to improper management of virtual memory attributes in the AMD graphics driver subsystem. Specifically, the issue arises in the amdxdna_insert_pages() function, where the flags used for virtual memory areas allow unprivileged users to exploit memory through the use of the madvise() syscall. This flaw can be leveraged by attackers to gain unauthorized access to sensitive memory areas, potentially leading to information disclosure or other malicious activities. A fix has been implemented to enhance memory flag management and mitigate this vulnerability.

References