CVE-2026-74419 accel/amdxdna: Adjust size for copy_to_user()
A local attacker can read kernel memory by exploiting a buffer size mismatch in the AMD XDNA accelerator driver's copy_to_user function.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-74419?
CVE-2026-74419 is a high-severity vulnerability in Linux, published on 15 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
accel/amdxdna: Adjust size for copy_to_user()
The amount of data returned to user space should be limited by the buffer size provided by the application. If the buffer is smaller than the data size, return only the portion that fits instead of failing.
Which versions are affected by CVE-2026-74419?
How do I fix CVE-2026-74419?
Apply the vendor's patch.
Is CVE-2026-74419 being exploited?
There is no known exploitation of CVE-2026-74419 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-74419, DEBIAN-CVE-2026-74419, GHSA-qxcv-w487-mjhg, UBUNTU-CVE-2026-74419.