CVE-2026-53169: accel/ethosu: reject NPU_OP_RESIZE commands from userspace
In the Linux kernel, the following vulnerability has been resolved:
accel/ethosu: reject NPUOPRESIZE commands from userspace
NPUOPRESIZE is a U85-only command that the driver does not yet implement. The existing WARNON(1) placeholder fires unconditionally whenever userspace submits this command via DRMIOCTLETHOSUGEMCREATE, causing unbounded kernel log spam.
If paniconwarn is set the kernel panics, giving any unprivileged user with access to the DRM device a trivial denial-of-service primitive.
Replace the WARNON(1) with an explicit -EINVAL return so the ioctl rejects the command before it reaches hardware.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
accel/ethosuto a version that resolves this vulnerability.Patch reject NPU_OP_RESIZE commands from userspace - Configuration
Ensure the kernel setting panic_on_warn is not enabled, since if it is set the kernel panics on WARN, impacting availability.
Linux kernel panic_on_warn = disabled
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53169?
The severity of CVE-2026-53169 is rated at 38.
How do I fix CVE-2026-53169?
To fix CVE-2026-53169, ensure that you update to the latest version of the Linux kernel where the vulnerability has been resolved.
What systems are affected by CVE-2026-53169?
CVE-2026-53169 affects the Linux kernel specifically within the accel/ethosu module.
What impact does CVE-2026-53169 have on userspace applications?
CVE-2026-53169 causes a WARN_ON(1) placeholder to trigger when userspace submits NPU_OP_RESIZE commands, which are not implemented.
Is CVE-2026-53169 a critical vulnerability?
While CVE-2026-53169 is a notable issue, it is not classified as a critical vulnerability due to its specific context and implementation.