GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-68316 (GCVE-0-2026-68316)

Vulnerability from cvelistv5 – Published: 2026-08-10 12:02 – Updated: 2026-08-17 05:03
VLAI
Title
accel: ethosu: Fix element size accounting for cmd stream validation
Summary
In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Fix element size accounting for cmd stream validation There are 2 issues with the element size handling in the command stream validation which result in too small of a size calculated when the element size is 16/32/64 bits. For NHWC format, the element size is simply missing from the calculation. The bitfield for the element size is different between IFM/IFM2 and OFM. IFM and IFM2 encode the precision in parameter bits 2:3, while OFM uses bits 1:2.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 5a5e9c0228e613f0ef2a58b9782d7c0ea8f1e58b , < b4ae748f8e6cb65bb86e5a281bbb5b5e5f106527 (git)
Affected: 5a5e9c0228e613f0ef2a58b9782d7c0ea8f1e58b , < 18a551482a4a326790698b273e76d7575a51a57d (git)
guessed Create a notification for this product.
Linux Linux Affected: 6.19
Unaffected: 0 , < 6.19 (semver)
Unaffected: 7.1.6 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/accel/ethosu/ethosu_gem.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "b4ae748f8e6cb65bb86e5a281bbb5b5e5f106527",
              "status": "affected",
              "version": "5a5e9c0228e613f0ef2a58b9782d7c0ea8f1e58b",
              "versionType": "git"
            },
            {
              "lessThan": "18a551482a4a326790698b273e76d7575a51a57d",
              "status": "affected",
              "version": "5a5e9c0228e613f0ef2a58b9782d7c0ea8f1e58b",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/accel/ethosu/ethosu_gem.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.19"
            },
            {
              "lessThan": "6.19",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.6",
                  "versionStartIncluding": "6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "6.19",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\naccel: ethosu: Fix element size accounting for cmd stream validation\n\nThere are 2 issues with the element size handling in the command stream\nvalidation which result in too small of a size calculated when the\nelement size is 16/32/64 bits.\n\nFor NHWC format, the element size is simply missing from the\ncalculation.\n\nThe bitfield for the element size is different between IFM/IFM2 and\nOFM. IFM and IFM2 encode the precision in parameter bits 2:3, while OFM\nuses bits 1:2."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerability is reached only through ioctls on the local Ethos-U DRM accel device node (/dev/accel/accelN) \u2014 DRM_IOCTL_ETHOSU_CMDSTREAM_BO_CREATE followed by ETHOSU_SUBMIT. There is no network or remote input path into the command stream validator.\nAC:L - Every input to the flawed calculation (precision, depth, width, strides, base addresses, region) comes straight from the attacker\u0027s command stream, so the undercounted size check can be triggered deterministically on every attempt. No race, timing window, or uncontrollable memory layout is involved.\nPR:L - Only an open file descriptor on the accel render node is needed; no capability, DRM_AUTH, or DRM_ROOT_ONLY flag guards any of the ethosu ioctls. On the Android/embedded systems where Ethos-U NPUs ship, this node is exposed to ordinary unprivileged inference applications.\nUI:N - The attacker performs the entire sequence itself \u2014 create a BO, create a crafted command-stream BO, submit the job. No victim action, file, or pre-existing state is required.\nS:U - The undersized validation lets the NPU DMA outside the buffer into other kernel-managed memory, but both the vulnerable driver and the corrupted resources belong to the same kernel security authority; no VM, IOMMU domain, or sandbox boundary is crossed.\nC:H - Undercounting the input feature map extent makes the NPU DMA-read physical memory well past the end of the BO (hundreds of KB to megabytes, attacker-chosen via depth/width/strides), and the results are written into an output BO that userspace mmaps, giving a practical arbitrary kernel-memory disclosure primitive.\nI:H - The same undercount applies to the output feature map, so the NPU DMA-writes attacker-influenced computation results past the end of the buffer into adjacent kernel/CMA memory. This is a controlled out-of-bounds write performed by the device, bypassing CPU page protections and exploitable for privilege escalation.\nA:H - Out-of-bounds DMA writes into arbitrary adjacent physical memory readily corrupt kernel data structures or other drivers\u0027 DMA buffers, producing oopses, panics, or platform-level aborts; on IOMMU-equipped platforms the stray access instead triggers a fatal translation fault."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T05:03:13.193Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/b4ae748f8e6cb65bb86e5a281bbb5b5e5f106527"
        },
        {
          "url": "https://git.kernel.org/stable/c/18a551482a4a326790698b273e76d7575a51a57d"
        }
      ],
      "title": "accel: ethosu: Fix element size accounting for cmd stream validation",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-68316",
    "datePublished": "2026-08-10T12:02:51.141Z",
    "dateReserved": "2026-07-30T09:28:09.382Z",
    "dateUpdated": "2026-08-17T05:03:13.193Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-68316",
      "date": "2026-09-11",
      "epss": "0.0012",
      "percentile": "0.02112"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-68316\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-08-10T13:20:21.577\",\"lastModified\":\"2026-08-17T05:18:34.510\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\naccel: ethosu: Fix element size accounting for cmd stream validation\\n\\nThere are 2 issues with the element size handling in the command stream\\nvalidation which result in too small of a size calculated when the\\nelement size is 16/32/64 bits.\\n\\nFor NHWC format, the element size is simply missing from the\\ncalculation.\\n\\nThe bitfield for the element size is different between IFM/IFM2 and\\nOFM. IFM and IFM2 encode the precision in parameter bits 2:3, while OFM\\nuses bits 1:2.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/accel/ethosu/ethosu_gem.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5a5e9c0228e613f0ef2a58b9782d7c0ea8f1e58b\",\"lessThan\":\"b4ae748f8e6cb65bb86e5a281bbb5b5e5f106527\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5a5e9c0228e613f0ef2a58b9782d7c0ea8f1e58b\",\"lessThan\":\"18a551482a4a326790698b273e76d7575a51a57d\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/accel/ethosu/ethosu_gem.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.19\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.19\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1.6\",\"lessThanOrEqual\":\"7.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.2\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/18a551482a4a326790698b273e76d7575a51a57d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/b4ae748f8e6cb65bb86e5a281bbb5b5e5f106527\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-31T11:21:50+00:00",
      "cve": "CVE-2026-68316",
      "id": "CVE-2026-68316",
      "initial_release_date": "2026-08-10T00:00:00+00:00",
      "product_status:known_not_affected": "277",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: accel: ethosu: Fix element size accounting for cmd stream validation",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68316.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-11T23:48:11Z",
      "cve": "CVE-2026-68316",
      "id": "CVE-2026-68316",
      "initial_release_date": "2026-08-11T23:48:11Z",
      "product_status:known_not_affected": "296",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-68316",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-68316.json",
      "version": "2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.