CVE-2026-97917 PUBLISHED

accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr

Assigner: Linux
Reserved: 25.09.2026 Published: 25.09.2026 Updated: 25.09.2026

In the Linux kernel, the following vulnerability has been resolved:

accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr

Add a size parameter to ivpu_to_cpu_addr() and validate that the whole [vpu_addr, vpu_addr + size) range stays within the BO.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 647371a6609ddf8700fe151af72e32daebb9baa7 to 5419be345f32222750e006b85b7f9bae1a285c8e (excl.)
  • affected from 647371a6609ddf8700fe151af72e32daebb9baa7 to 43c68f52aecd519eb682fa09d57ae52c896f860f (excl.)
  • affected from 647371a6609ddf8700fe151af72e32daebb9baa7 to 29f82a2280e170429370e7a842cde4e70ead8547 (excl.)
  • affected from 647371a6609ddf8700fe151af72e32daebb9baa7 to 3837c3f29fbc3b8c12bebf5c62741e2befe3482a (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.3 is affected
  • unaffected from 0 to 6.3 (excl.)
  • unaffected from 6.12.111 to 6.12.* (incl.)
  • unaffected from 6.18.53 to 6.18.* (incl.)
  • unaffected from 7.2.7 to 7.2.* (incl.)
  • unaffected from 7.3-rc3 to * (incl.)

References