CVE-2026-68316

A flaw was found in the Linux kernel's accel: ethosu component. This vulnerability involves incorrect element size accounting during command stream validation. Specifically, the calculation for element sizes of 16, 32, or 64 bits can be too small, and the element size is entirely missing for the NHWC format. Additionally, the bitfield for element size differs between Input Feature Map (IFM)/IFM2 and Output Feature Map (OFM) parameters. This could lead to improper handling of data within the command stream.

This vulnerability is rated as having Moderate impact because exploitation requires local access to specialized Arm Ethos-U accelerator hardware and valid user permissions to dispatch command streams to the subsystem. An unprivileged or local attacker with direct access could potentially trigger improper memory validation, leading to a system crash or unstable kernel state. Supported Red Hat Enterprise Linux releases are not affected because the relevant accelerator subsystem driver is not present in their kernel builds.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.