CVE-2026-23424

MediumCVSS 5.5/10Last modified Jul 24, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

accel/amdxdna: Validate command buffer payload count

The count field in the command header is used to determine the valid payload size. Verify that the valid payload does not exceed the remaining buffer space.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= aac243092b707bb3018e951d470cc1a9bcbaba6c, < 3464e751755172ddbb849c1bd92f5f59e95c59a1; >= aac243092b707bb3018e951d470cc1a9bcbaba6c, < 3ed2ae6b3fe869f99b75afd02045ba5c0c0773e2; >= aac243092b707bb3018e951d470cc1a9bcbaba6c, < 901ec3470994006bc8dd02399e16b675566c3416
LinuxLinux6.14

References

Timeline

Published
Apr 3, 2026
Last modified
Jul 24, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-234255.5In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix ID register initialization for non-protected pKVM guestCVE-2026-234265.5In the Linux kernel, the following vulnerability has been resolved: drm/logicvc: Fix device node reference leak in logicvc_drm_config_parseCVE-2026-234277.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in durable v2 replay of active file handles CVE-2026-234287.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of share_conf in compound request smb2_get_kCVE-2026-234295.5In the Linux kernel, the following vulnerability has been resolved: iommu/sva: Fix crash in iommu_sva_unbind_device() domain->mm->iommu_mmCVE-2026-23435.3The PeproDev Ultimate Invoice WordPress plugin through 2.2.5 has a bulk download invoices action that generates ZIP archives containing expoCVE-2026-234305.5In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Don't overwrite KMS surface dirty tracker We were overwritCVE-2026-234315.5In the Linux kernel, the following vulnerability has been resolved: spi: amlogic-spisg: Fix memory leak in aml_spisg_probe() In aml_spisg_CVE-2026-234327.8In the Linux kernel, the following vulnerability has been resolved: mshv: Fix use-after-free in mshv_map_user_memory error path In the errCVE-2026-234335.5In the Linux kernel, the following vulnerability has been resolved: arm_mpam: Fix null pointer dereference when restoring bandwidth counterCVE-2026-234345.5In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: serialize lock/unlock against other NAND operations nandCVE-2026-234355.5In the Linux kernel, the following vulnerability has been resolved: perf/x86: Move event pointer setup earlier in x86_pmu_enable() A produ