Riskcovery

CVE-2026-97917

accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr

State
Published
Severity
Not scored
Published
Sep 25, 2026
Updated
Oct 21, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr

Add a size parameter to ivpu_to_cpu_addr() and validate that the whole [vpu_addr, vpu_addr + size) range stays within the BO.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 647371a6609ddf8700fe151af72e32daebb9baa7 to before 962e565f45dbea77d12a7ed5ef34df8f0c603e28Affected
  • 647371a6609ddf8700fe151af72e32daebb9baa7 to before 5419be345f32222750e006b85b7f9bae1a285c8eAffected
  • 647371a6609ddf8700fe151af72e32daebb9baa7 to before 43c68f52aecd519eb682fa09d57ae52c896f860fAffected
  • 647371a6609ddf8700fe151af72e32daebb9baa7 to before 29f82a2280e170429370e7a842cde4e70ead8547Affected
  • 647371a6609ddf8700fe151af72e32daebb9baa7 to before 3837c3f29fbc3b8c12bebf5c62741e2befe3482aAffected
LinuxLinux
  • 6.3Affected
  • before 6.3Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.111 through 6.12.*Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2.7 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.