CVE-2026-74423
Received Received - Intake

Linux Kernel Memory Leak in AMD XDNA Accelerator Driver

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix leak when pinning ubuf pages When pin_user_pages_fast() returns fewer pages than requested, the pages that were successfully pinned are not released, leading to a leak. Fix this by unpinning any partially pinned pages before returning failure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-74423
EUVD
EUVD-2026-59570

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's AMD XDNA accelerator driver. It occurs when the function pin_user_pages_fast() does not pin all requested pages but still returns success. The already pinned pages are not released, causing a memory leak.

Detection Guidance

This vulnerability is specific to the Linux kernel's amdxdna driver and involves a memory leak when pinning user buffer pages. Detection requires checking for kernel logs or memory leaks related to the amdxdna module. Commands like dmesg, journalctl, or checking /proc/meminfo for unusual memory usage may help identify the issue.

Impact Analysis

This could lead to resource exhaustion on systems using the AMD XDNA accelerator, potentially causing performance degradation or system instability. Users may experience crashes or unexpected behavior in applications relying on this driver.

Mitigation Strategies

Apply the latest kernel update that includes the fix for this vulnerability. If an update is not immediately available, consider disabling the amdxdna module if it is not required. Monitor kernel logs for signs of the issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74423. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart