CVE-2026-23280
Published: 25 March 2026
Summary
CVE-2026-23280 is a high-severity an unspecified weakness vulnerability in Linux Linux Kernel. Its CVSS base score is 7.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 5.9th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Deeper analysis
CVE-2026-23280 affects the Linux kernel's accel/amdxdna component, where a ubuf size calculation can overflow. This results in an undersized allocation and possible memory corruption. The vulnerability was published on 2026-03-25 and carries a CVSS 3.1 score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
A local attacker with low privileges can exploit this vulnerability with low attack complexity and no user interaction. Successful exploitation enables high-impact memory corruption, potentially compromising confidentiality, integrity, and availability.
Mitigation patches are available in the Linux kernel stable repository via specific commits: https://git.kernel.org/stable/c/03808abb1d868aed7478a11a82e5bb4b3f1ca6d6, https://git.kernel.org/stable/c/1500b31db94374a6669e73ce94d6f71cf8e85e06, and https://git.kernel.org/stable/c/972bf4a23478fcb247b4f507d47a584bc8aea5bd. These commits prevent the ubuf size overflow by using check_add_overflow() helpers to validate the size calculation before allocation.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-15200
Vulnerability details
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Prevent ubuf size overflow The ubuf size calculation may overflow, resulting in an undersized allocation and possible memory corruption. Use check_add_overflow() helpers to validate the size calculation before allocation.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Local kernel memory corruption vulnerability (buffer size overflow) directly enables privilege escalation via exploitation of a software vulnerability in a privileged component.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly mitigates CVE-2026-23280 by requiring timely application of kernel patches that add check_add_overflow() validation to prevent ubuf size calculation overflows.
Requires validation of user-supplied buffer sizes in the amdxdna driver to prevent arithmetic overflows leading to undersized allocations and memory corruption.
Provides memory safeguards that limit the impact and exploitability of memory corruption from undersized ubuf allocations in the kernel.