CVE Database›Document archive›CVE-2026-53171

CVE-2026-53171

kernel: accel/ethosu: fix arithmetic issues in dma_length()

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 25, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's accel/ethosu driver. The dma_length() function, responsible for calculating Direct Memory Access (DMA) region usage, contains several arithmetic issues. These issues, including potential underflows and overflows during calculations, can lead to an under-reporting of memory region sizes. This under-reporting can bypass crucial bounds validation checks, potentially allowing an attacker to access memory outside of its intended boundaries.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-190 · Integer Overflow or Wraparound