CVE-2026-53171

The CVE-2026-53171 entry concerns the Linux kernel’s accel/ethosu component. The issue arises in dma_length(), which derives DMA region usage from the command stream and updates region_size[]. The calculation len = ((len + stride[0]) * size0 + stride[1]) * size1 can suffer from signed underflow, ...

CVE-2026-53169

The CVE affects the Linux kernel driver path accel/ethosu and specifically rejects NPU_OP_RESIZE commands from userspace. The root cause is a placeholder WARN_ON(1) that fires for DRM_IOCTL_ETHOSU_GEM_CREATE, allowing unbounded kernel log spam and, if panic_on_warn is set, a potential denial-of-s...

EUVD-2026-39260

In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: reject NPUOPRESIZE commands from userspace NPUOPRESIZE is a U85-only command that the driver does not yet implement. The existing WARNON1 placeholder fires unconditionally whenever userspace submits this command via...