Linux kernel amdxdna driver: Device buffers could be exported
Summary
The Linux kernel driver for the AMD XDNA neural processing unit (accel/amdxdna) allowed device buffers to be exported, although these buffers are not meant to be shared. The upstream fix explicitly disables export support for them. The issue is local: an attacker needs local access and a user or process that can reach the NPU device. The supplied score of 7.8 is high, but the upstream description does not describe a concrete exploit path.
Affected
- Linux kernel with the accel/amdxdna driver from 6.14 up to the fix in 7.2.7 (per CVE record and OSV) - Exact affected versions of distribution kernels vary; check your vendor advisory
Fixed in
- Linux kernel 7.2.7 or later (per CVE record and OSV) - Stable commits 33b00fa8023e8ade3409aa9c833b8ce65b8c29eb and 9480dd7ec3fcadd4217503e4bb32c16e19e4b21f - Distribution kernels: Unknown, use the vendor advisory for the exact package
Workaround
None published by the vendor. Not from a source: on systems without AMD Ryzen AI NPUs, or where the NPU is unused, unloading or blacklisting the amdxdna module can reduce exposure until patched. Test this first.
Exploitation
Unknown. No exploitation in the wild and no public proof of concept were found. SUSE lists an EPSS score of 0.00112.
Our recommendation
- Install the distribution kernel update in the normal patch cycle - Prioritise Linux hosts with AMD Ryzen AI NPUs that run untrusted local code or are shared between users - Check whether the amdxdna module is loaded on your Linux systems
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Linux stable commit 33b00fa8023e8ade3409aa9c833b8ce65b8c29eb git.kernel.org
- Linux stable commit 9480dd7ec3fcadd4217503e4bb32c16e19e4b21f git.kernel.org
- OSV record CVE-2026-98436 osv.dev
- Ubuntu security notice CVE-2026-98436 ubuntu.com
- SUSE CVE listing via Vulners vulners.com
- Upstream patch discussion on dri-devel www.mail-archive.com
- AMD Ryzen AI documentation ryzenai.docs.amd.com
- amdxdna driver overview linux-drivers.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 23:48.
Original description (NVD)
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device buffer exporting Device buffers are never intended to be exported. Disable exporting support explicitly.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.