CVE-2026-53171

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description Arithmetic issues exist in the dma length() function within the accel/ethosu component. The function calculates DMA region usage based on command stream values to update the region size[] array. Specifically, signed stride values can underflow when added to len, intermediate multiplications may overflow, and the addition of len and dma->offset can overflow during updates. Additionally, the caller failed to validate error returns from dma length(). Because region size[] is used by ethosu job.c to validate command stream accesses against GEM (Graphics Execution Manager) buffer sizes, arithmetic wraparound can lead to under-reporting region usage and bypassing bounds validation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.