Riskcovery

CVE-2026-68316

accel: ethosu: Fix element size accounting for cmd stream validation

State
Published
Severity
7.8 High
Published
Aug 10, 2026
Updated
Aug 17, 2026
Reserved
Jul 30, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

accel: ethosu: Fix element size accounting for cmd stream validation

There are 2 issues with the element size handling in the command stream validation which result in too small of a size calculated when the element size is 16/32/64 bits.

For NHWC format, the element size is simply missing from the calculation.

The bitfield for the element size is different between IFM/IFM2 and OFM. IFM and IFM2 encode the precision in parameter bits 2:3, while OFM uses bits 1:2.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5a5e9c0228e613f0ef2a58b9782d7c0ea8f1e58b to before b4ae748f8e6cb65bb86e5a281bbb5b5e5f106527Affected
  • 5a5e9c0228e613f0ef2a58b9782d7c0ea8f1e58b to before 18a551482a4a326790698b273e76d7575a51a57dAffected
LinuxLinux
  • 6.19Affected
  • before 6.19Not affected
  • 7.1.6 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.