Memory Management Vulnerability in Linux Kernel Affecting AMD XDNA Architecture

CVE-2026-98146

What is CVE-2026-98146?

A significant memory management issue has been identified in the Linux kernel, specifically impacting the AMD XDNA architecture. This vulnerability arises from a structure within the AMD XDNA command chain that utilizes a flexible array, which was incorrectly annotated with a userspace-dependent count. This setup allows userspace to modify the command count concurrently, potentially setting it to zero. Consequently, any bounds checks relying on this count could lead to undetected memory access violations, causing a kernel panic. The issue was rectified by removing the __counted_by annotation, thus eliminating the dangerous dependency on a userspace-controlled parameter for validating array bounds.

References