CVE-2026-72089

A flaw was found in the Linux kernel's Intel Versatile Processing Unit (IVPU) accelerator driver. An attacker could exploit a vulnerability in how the driver handles firmware logs with incorrect size information. This could lead to an out-of-bounds read, potentially disclosing sensitive information or causing a system crash. In some cases, it could also result in a denial of service due to an infinite loop.

This vulnerability is rated as Moderate impact because exploitation requires local access and depends strictly on the presence of Intel VPU accelerator hardware and the active driver. Systems lacking this hardware or configurations where the driver is not loaded cannot be targeted. Red Hat Enterprise Linux 8 and 9 do not include the affected driver subsystem and remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.