Unrated severityNVD Advisory· Published Sep 25, 2026· Updated Oct 21, 2026
CVE-2026-97917
CVE-2026-97917
Description
In the Linux kernel, the following vulnerability has been resolved:
accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr
Add a size parameter to ivpu_to_cpu_addr() and validate that the whole [vpu_addr, vpu_addr + size) range stays within the BO.
Affected products
3- osv-coords2 versions
< 7.2.9-1.1+ 1 more
- (no CPE)range: < 7.2.9-1.1
- (no CPE)range: >= 6.3.0, < 6.6.160
Patches
Vulnerability mechanics
References
5- git.kernel.org/stable/c/29f82a2280e170429370e7a842cde4e70ead8547nvd
- git.kernel.org/stable/c/3837c3f29fbc3b8c12bebf5c62741e2befe3482anvd
- git.kernel.org/stable/c/43c68f52aecd519eb682fa09d57ae52c896f860fnvd
- git.kernel.org/stable/c/5419be345f32222750e006b85b7f9bae1a285c8envd
- git.kernel.org/stable/c/962e565f45dbea77d12a7ed5ef34df8f0c603e28nvd
News mentions
0No linked articles in our index yet.