CVE-2026-97917
Linux: accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.20%Chance of exploitation activity in the next 30 days, higher than 9% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in962e565f45dbea77d12a7ed5ef34df8f0c603e28Also 5419be345f32222750e006b85b7f9bae1a285c8e, 43c68f52aecd519eb682fa09d57ae52c896f860f and 2 moreCVE List
What fixes it
- 962e565f45dbea77d12a7ed5ef34df8f0c603e28LinuxCVE List
- 5419be345f32222750e006b85b7f9bae1a285c8eLinuxCVE List
- 43c68f52aecd519eb682fa09d57ae52c896f860fLinuxCVE List
- 29f82a2280e170429370e7a842cde4e70ead8547LinuxCVE List
- 3837c3f29fbc3b8c12bebf5c62741e2befe3482aLinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr
Add a size parameter to ivpu_to_cpu_addr() and validate that the whole [vpu_addr, vpu_addr + size) range stays within the BO.
Text from CVE List
Affected versions 12
- Linuxaffected: 647371a6609ddf8700fe151af72e32daebb9baa7 before 962e565f45dbea77d12a7ed5ef34df8f0c603e28CVE List
- Linuxaffected: 647371a6609ddf8700fe151af72e32daebb9baa7 before 5419be345f32222750e006b85b7f9bae1a285c8eCVE List
- Linuxaffected: 647371a6609ddf8700fe151af72e32daebb9baa7 before 43c68f52aecd519eb682fa09d57ae52c896f860fCVE List
- Linuxaffected: 647371a6609ddf8700fe151af72e32daebb9baa7 before 29f82a2280e170429370e7a842cde4e70ead8547CVE List
- Linuxaffected: 647371a6609ddf8700fe151af72e32daebb9baa7 before 3837c3f29fbc3b8c12bebf5c62741e2befe3482aCVE List
- Linuxaffected: 6.3CVE List
- Linuxunaffected: all versions before 6.3CVE List
- Linuxunaffected: 6.6.160 through 6.6.*CVE List
- Linuxunaffected: 6.12.111 through 6.12.*CVE List
- Linuxunaffected: 6.18.53 through 6.18.*CVE List
- Linuxunaffected: 7.2.7 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List
References 5
- git.kernel.org/stable/c/962e565f45dbea77d12a7ed5ef34df8f0c603e28Referencevia CVE List
- git.kernel.org/stable/c/5419be345f32222750e006b85b7f9bae1a285c8eReferencevia CVE List
- git.kernel.org/stable/c/43c68f52aecd519eb682fa09d57ae52c896f860fReferencevia CVE List
- git.kernel.org/stable/c/29f82a2280e170429370e7a842cde4e70ead8547Referencevia CVE List
- git.kernel.org/stable/c/3837c3f29fbc3b8c12bebf5c62741e2befe3482aReferencevia CVE List