CVE-2026-53172

kernel: accel/ethosu: fix IFM region index out-of-bounds in command stream parser

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 25, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's accel/ethosu component. An incorrect mask used when processing the NPU_SET_IFM_REGION command allows a local userspace caller to provide an out-of-bounds region index. This can lead to an out-of-bounds write, corrupting adjacent kernel heap data.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-1285 · Improper Validation of Specified Index, Position, or Offset in Input