What’s Vulnerable › Vulnerabilities

CVE-2026-97917: accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-25 · updated 2026-10-21

Description

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr Add a size parameter to ivpu_to_cpu_addr() and validate that the whole [vpu_addr, vpu_addr + size) range stays within the BO.

Affected products

• Linux kernel: 6.3 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/29f82a2280e170429370e7a842cde4e70ead8547
• https://git.kernel.org/stable/c/3837c3f29fbc3b8c12bebf5c62741e2befe3482a
• https://git.kernel.org/stable/c/43c68f52aecd519eb682fa09d57ae52c896f860f
• https://git.kernel.org/stable/c/5419be345f32222750e006b85b7f9bae1a285c8e
• https://git.kernel.org/stable/c/962e565f45dbea77d12a7ed5ef34df8f0c603e28

Get alerted when CVE-2026-97917 or the next vulnerability affects your stack