accel/amdxdna: device buffers could be exported over dma-buf when they were never meant to be
Impact
The AMD XDNA accelerator driver allowed device buffers to be exported as dma-bufs although they were never designed to be shared that way; the fix disables exporting explicitly. The upstream record is one sentence and does not describe what an attacker gains, so treat the concrete impact as unestablished - the plausible class is a local user sharing a device buffer whose lifetime or backing the driver does not track across the export, in a driver for an on-die AI accelerator. NVD's 7.8 local-privilege-escalation vector is the generic kernel-CVE score, not a demonstrated escalation. Most GPU datacenter fleets do not have XDNA NPU hardware; this matters mainly to operators running AMD Ryzen AI parts.
Who can reach it
Local user holding the amdxdna accel device node who can issue the dma-buf export ioctl. No remote path, no authentication beyond access to the device.
What to do
Upgrade to a stable kernel carrying either of the two listed commits and reboot the affected nodes. If no XDNA NPU hardware is present the driver never binds and there is nothing to schedule. The record names no fixed distro version.
References
Related entries
- Linux kernel drm/xe: NULL pointer dereference racing VM close against eviction of a shared BOCVE-2026-98510 · Linux kernel drm/xe (VM close path, contested VMA vs page-table teardown)High
- Linux kernel nouveau: double-free of VMM page array when client init fails on device openCVE-2026-98515 · Linux kernel nouveau (nvif_vmm_dtor client teardown)High
- Linux kernel nouveau/uvmm: use-after-free reading resource type when BO sits in TTM_PL_SYSTEMCVE-2026-98517 · Linux kernel nouveau uvmm (GPU VA bind path, TTM_PL_SYSTEM resource)High
- Linux kernel amdkfd: cached address_space for /dev/kfd causes use-after-free and missed unmap on GPU resetCVE-2026-98520 · Linux kernel amdgpu/amdkfd (kfd_dev_mapping cached address_space)High
- Linux kernel drm/xe: final framebuffer unpin leaves a stale pinned-list entry and risks use-after-freeCVE-2026-98999 · Linux kernel drm/xe (pinned_link bookkeeping on framebuffer unpin)High
- Linux drm/i915: execbuffer relocation cleanup frees past the exec array after command-parser VMAsCVE-2026-99006 · Linux kernel drm/i915 GEM execbuffer (relocation cleanup past the exec array)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.