CVE-2026-74419
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
In the Linux kernel, the accel/amdxdna driver did not limit the amount of data returned to user space by the buffer size provided by the application. If the buffer was smaller than the data size, it returned an error instead of only the fitting portion.
Risk Assessment
Applications using this driver may receive errors instead of partial data, potentially causing malfunction or information leakage if data is mishandled.
Recommendation
Install the kernel patch that limits the copied data to the user buffer size and returns only the fitting portion.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Adjust size for copy_to_user() The amount of data returned to user space should be limited by the buffer size provided by the application. If the buffer is smaller than the data size, return only the portion that fits instead of failing.