Out-of-bounds read in Linux kernel - CVE-2026-97915

Vulnerability details

The vulnerability allows a local privileged user to disclose adjacent bytes from a shared tracing buffer.

The vulnerability exists due to an out-of-bounds read in the ivpu firmware log name printing routines when processing a firmware-provided log name that is not NUL-terminated. A local privileged user can cause the firmware log name to be printed to disclose adjacent bytes from the shared tracing buffer.

Affected software

How to mitigate CVE-2026-97915

External References

• https://git.kernel.org/stable/c/3d7130807009e9be6132c1394a2c7708a3ba39a7
• https://git.kernel.org/stable/c/5d06257359c9006a208fece9eb7f0a0e83e0cc92
• https://git.kernel.org/stable/c/6dbba89df4e842d226f5cd3dbc5e94533cfceea2
• https://git.kernel.org/stable/c/95bf070f3225dc7175725438c916ad321d42fe45

Related Security Bulletins

• Out-of-bounds read in Linux kernel accel ivpu driver