CVE-2026-72089

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the accel/ivpu component where the fw log from bo() function fails to verify that the log->size is at least as large as the log->header size. Consequently, the fw log print buffer() function performs a subtraction that can result in an integer underflow, creating a very large data size value. This allows fw log print lines() to read memory far beyond the actual data region of the Buffer Object (BO). Additionally, if the size is 0, fw log from bo() does not advance the offset, which can lead to an infinite loop for the callers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.