CVE-2026-53217

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the mvpp2 driver where the CPU synchronization for received data is incorrectly aligned. The driver programs the RX queue packet offset such that hardware writes data at dma addr + MVPP2 SKB HEADROOM. However, the CPU sync starts at dma addr and only covers rx bytes + MVPP2 MH SIZE bytes. This causes the system to sync unused headroom while missing bytes at the packet tail. On non-coherent DMA (Direct Memory Access) systems—systems where the CPU and DMA-capable hardware do not share a consistent view of memory—this can result in the CPU reading stale cache contents for the end of the received frame. The issue is addressed by using the dma sync single range for cpu() function with MVPP2 SKB HEADROOM as the range offset.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.