CVE-2026-97917

Not scored yetLast modified Oct 21, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr

Add a size parameter to ivpu_to_cpu_addr() and validate that the whole [vpu_addr, vpu_addr + size) range stays within the BO.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Sep 25, 2026
Last modified
Oct 21, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-97918In the Linux kernel, the following vulnerability has been resolved: tracing: Undo the registration when enabling the histogram trigger failCVE-2026-97919In the Linux kernel, the following vulnerability has been resolved: tracing: Take the reference before publishing the named histogram triggCVE-2026-97926.5A flaw was found in Keycloak's Client Policies, specifically within the `org.keycloak.protocol.oidc` component. When certain condition proviCVE-2026-97920In the Linux kernel, the following vulnerability has been resolved: tracing: Keep the entry count when the histogram stats allocation failsCVE-2026-97921In the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram the field rejected for a bad modifier Writing CVE-2026-97922In the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram var refs regardless of how often they are referCVE-2026-97923In the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram the var ref when its initialization fails creaCVE-2026-97924In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Don't destroy fields when event removal fails desCVE-2026-97925In the Linux kernel, the following vulnerability has been resolved: tick/broadcast: Plug clockevents replacement race 朱恺乾 reported and decCVE-2026-979267.0In the Linux kernel, the following vulnerability has been resolved: ufs: validate cylinder group metadata before caching it ufs_read_cylinCVE-2026-97927In the Linux kernel, the following vulnerability has been resolved: ufs: create the root dentry after loading cylinder metadata ufs_fill_sCVE-2026-97928In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip the VMID 0 flush for VRAM Clear-on-release only runs
CVE-2026-97917: Unscored | Vulnix