CVE-2026-63873
Received Received - Intake

Memory Leak in Linux Kernel AMDXDNA Driver

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix mm_struct reference leak in aie2_populate_range() aie2_populate_range() jumps back to the again label without calling mmput(mm), leaking a reference to the mm_struct. Add the missing mmput() before jumping to again.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-63873
EUVD
EUVD-2026-45558

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a reference leak in the Linux kernel's AMD XDNA acceleration driver. The function aie2_populate_range() fails to release a reference to the mm_struct when jumping back to a label, causing a memory leak.

Detection Guidance

This vulnerability is specific to the Linux kernel's accel/amdxdna subsystem and involves a reference leak in the aie2_populate_range() function. Detection requires checking for kernel memory leaks or unusual mm_struct reference counts in the amdxdna driver. No direct network detection commands are applicable. Use kernel debugging tools like 'dmesg' or 'cat /proc/meminfo' to monitor memory usage and leaks.

Impact Analysis

This could lead to resource exhaustion over time as memory references are not properly released. It may cause system instability or crashes due to excessive memory usage.

Compliance Impact

This vulnerability involves a memory management issue in the Linux kernel where a reference to mm_struct is leaked, potentially leading to resource exhaustion. It does not directly impact data privacy or security controls required by standards like GDPR or HIPAA. Compliance effects would be indirect, such as system instability or denial of service, which could hinder operations but not inherently violate these regulations.

Mitigation Strategies

Apply the latest kernel update that includes the fix for this vulnerability. If immediate patching is not possible, consider disabling the amdxdna driver if it is not required. Monitor system memory usage and logs for mm_struct leaks as a temporary workaround.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-63873. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart