Out-of-bounds read in Linux kernel - CVE-2026-97917

Vulnerability details

The vulnerability allows a local user to read memory outside the intended buffer.

The vulnerability exists due to an out-of-bounds read in ivpu_to_cpu_addr() when processing IPC messages containing buffer addresses. A local user can cause IPC processing to use an address range that extends beyond the buffer to read memory outside the intended buffer.

Affected software

How to mitigate CVE-2026-97917

External References

• https://git.kernel.org/stable/c/29f82a2280e170429370e7a842cde4e70ead8547
• https://git.kernel.org/stable/c/3837c3f29fbc3b8c12bebf5c62741e2befe3482a
• https://git.kernel.org/stable/c/43c68f52aecd519eb682fa09d57ae52c896f860f
• https://git.kernel.org/stable/c/5419be345f32222750e006b85b7f9bae1a285c8e

Related Security Bulletins

• Out-of-bounds read in Linux kernel accel ivpu driver