CVE-2026-68316 PUBLISHED

accel: ethosu: Fix element size accounting for cmd stream validation

Assigner: Linux
Reserved: 30.07.2026 Published: 10.08.2026 Updated: 10.08.2026

In the Linux kernel, the following vulnerability has been resolved:

accel: ethosu: Fix element size accounting for cmd stream validation

There are 2 issues with the element size handling in the command stream validation which result in too small of a size calculated when the element size is 16/32/64 bits.

For NHWC format, the element size is simply missing from the calculation.

The bitfield for the element size is different between IFM/IFM2 and OFM. IFM and IFM2 encode the precision in parameter bits 2:3, while OFM uses bits 1:2.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 5a5e9c0228e613f0ef2a58b9782d7c0ea8f1e58b to b4ae748f8e6cb65bb86e5a281bbb5b5e5f106527 (excl.)
  • affected from 5a5e9c0228e613f0ef2a58b9782d7c0ea8f1e58b to 18a551482a4a326790698b273e76d7575a51a57d (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.19 is affected
  • unaffected from 0 to 6.19 (excl.)
  • unaffected from 7.1.6 to 7.1.* (incl.)
  • unaffected from 7.2-rc5 to * (incl.)

References