vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-97917

accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr

N/A
Published: September 25, 2026 at 10:22 AM UTC
Updated: October 21, 2026 at 01:21 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr Add a size parameter to ivpu_to_cpu_addr() and validate that the whole [vpu_addr, vpu_addr + size) range stays within the BO.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
6.3647371a6609ddf8700fe151af72e32daebb9baa7
Vendor states this is fixed in 29f82a2280e170429370e7a842cde4e70ead8547 (fixed)
Vendor states this is fixed in 3837c3f29fbc3b8c12bebf5c62741e2befe3482a (fixed)
Vendor states this is fixed in 43c68f52aecd519eb682fa09d57ae52c896f860f (fixed)
Vendor states this is fixed in 5419be345f32222750e006b85b7f9bae1a285c8e (fixed)
Vendor states this is fixed in 6.12.111 (unaffected)
Vendor states this is fixed in 6.18.53 (unaffected)
Vendor states this is fixed in 6.3 (unaffected)
Vendor states this is fixed in 6.6.160 (unaffected)
Vendor states this is fixed in 7.2.7 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc3 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (5)

Source: cverecord
https://git.kernel.org/stable/c/5419be345f32222750e006b85b7f9bae1a285c8e
Source: cverecord
https://git.kernel.org/stable/c/43c68f52aecd519eb682fa09d57ae52c896f860f
Source: cverecord
https://git.kernel.org/stable/c/29f82a2280e170429370e7a842cde4e70ead8547
Source: cverecord
https://git.kernel.org/stable/c/3837c3f29fbc3b8c12bebf5c62741e2befe3482a
Source: cverecord
https://git.kernel.org/stable/c/962e565f45dbea77d12a7ed5ef34df8f0c603e28

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card