CVE-2026-53170

A flaw was found in the Linux kernel's accel/ethosu driver. A local attacker could exploit a vulnerability where DMA commands with uninitialized length are not properly handled. By omitting a specific DMA length setup command and issuing a DMA start command, a user could bypass bounds checks, allowing the hardware to execute DMA operations with stale physical addresses. This could lead to memory corruption, potentially resulting in privilege escalation or arbitrary code execution.