CVE-2026-53173

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds write exists in the heap memory of the Linux kernel within the ethosu gem cmdstream copy and validate() function. The issue occurs during the command stream parsing loop when a 64-bit command word is encountered (indicated by bit 14 being set). In this scenario, the index variable i is incremented a second time without re-verifying the loop boundary before writing the second word to the bocmds buffer. Because userspace controls both the buffer contents and the size argument via the ioctl, this can be triggered by a user to write four bytes past the end of the DMA allocation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.