CVE-2026-97911
Linux: accel: ethosu: Ensure SRAM region size matches job
Linux LinuxOperating systemsCVSS
7.8HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.15%Chance of exploitation activity in the next 30 days, higher than 4% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in50c27d412fedc95b8d54d477af47451a382e8cddAlso 2b39d680c9e0fb4d625f2916980977622e84248cCVE List
What fixes it
- 50c27d412fedc95b8d54d477af47451a382e8cddLinuxCVE List
- 2b39d680c9e0fb4d625f2916980977622e84248cLinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
accel: ethosu: Ensure SRAM region size matches job
It is possible for userspace to set the job SRAM size to 0, but then still have SRAM accesses in the command stream. When the job SRAM size is 0, setting the region base register is skipped and a stale base address from a prior job is used.
Check the region size against the job's SRAM size instead of just the size of the SRAM. The job's SRAM size was already checked against the total SRAM size.
Text from CVE List
Affected versions 6
- Linuxaffected: 9cff90774872ed6613b7571ce018b5b455d86890 before 50c27d412fedc95b8d54d477af47451a382e8cddCVE List
- Linuxaffected: 9cff90774872ed6613b7571ce018b5b455d86890 before 2b39d680c9e0fb4d625f2916980977622e84248cCVE List
- Linuxaffected: 7.2CVE List
- Linuxunaffected: all versions before 7.2CVE List
- Linuxunaffected: 7.2.7 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List