CVE-2026-74419

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Adjust size for copy_to_user() The amount of data returned to user space should be limited by the buffer size provided by the application. If the buffer is smaller than the data size, return only the portion that fits instead of failing.

CVSS v3 7.3 HIGH

7.3^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.5

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/097e57195ef813735c8b714d6503bf3ad0742515
https://git.kernel.org/stable/c/6e87001fe19f251e2ae14373bc76554358a13df2

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-15 06:22

Updated : 2026-08-17 06:19

NVD link : CVE-2026-74419

Mitre link : CVE-2026-74419

CVE.ORG link : CVE-2026-74419

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-74419", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.5, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "850d71f6bf4c2010efae845f9ff841cce902f22c", "lessThan": "097e57195ef813735c8b714d6503bf3ad0742515", "versionType": "git"}, {"status": "affected", "version": "850d71f6bf4c2010efae845f9ff841cce902f22c", "lessThan": "6e87001fe19f251e2ae14373bc76554358a13df2", "versionType": "git"}], "programFiles": ["drivers/accel/amdxdna/aie2_error.c", "drivers/accel/amdxdna/aie2_message.c", "drivers/accel/amdxdna/aie2_pci.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.14"}, {"status": "unaffected", "version": "0", "lessThan": "6.14", "versionType": "semver"}, {"status": "unaffected", "version": "7.1.5", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/accel/amdxdna/aie2_error.c", "drivers/accel/amdxdna/aie2_message.c", "drivers/accel/amdxdna/aie2_pci.c"], "defaultStatus": "affected"}]}], "published": "2026-08-15T06:22:43.997", "references": [{"url": "https://git.kernel.org/stable/c/097e57195ef813735c8b714d6503bf3ad0742515", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/6e87001fe19f251e2ae14373bc76554358a13df2", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\naccel/amdxdna: Adjust size for copy_to_user()\n\nThe amount of data returned to user space should be limited by the buffer\nsize provided by the application. If the buffer is smaller than the data\nsize, return only the portion that fits instead of failing."}], "lastModified": "2026-08-17T06:19:37.367", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}