CVE-2026-53171: accel/ethosu: fix arithmetic issues in dma_length()
In the Linux kernel, the following vulnerability has been resolved:
accel/ethosu: fix arithmetic issues in dmalength()
dmalength() derives DMA region usage from command stream values and updates regionsize[]:
len = ((len + stride[0]) size0 + stride[1]) size1 regionsize[region] = max(..., len + dma->offset)
Several arithmetic issues can corrupt the derived region size:
- signed stride values may underflow when added to len - intermediate multiplications may overflow - len + dma->offset may overflow during regionsize updates - dmalength() error returns were not validated by the caller
regionsize[] is later used by ethosujob.c to validate command stream accesses against GEM buffer sizes. Arithmetic wraparound can therefore under-report region usage and bypass the bounds validation.
Fix by validating signed additions, using overflow helpers for multiplications and offset updates, and propagating dmalength() failures to the caller.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
accel/ethosuto a version that resolves this vulnerability.Patch fix arithmetic issues in dma_length() - Compensating control
Ensure callers validate dma_length() error returns; do not proceed with region_size/bounds validation if dma_length() reports failure.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53171?
CVE-2026-53171 has a severity rating of high with a score of 8.8.
How do I fix CVE-2026-53171?
To fix CVE-2026-53171, ensure that you update your Linux kernel to the latest patched version as provided by the Linux maintainers.
What impact does CVE-2026-53171 have on system security?
CVE-2026-53171 may allow attackers to exploit arithmetic issues in DMA length calculations, potentially leading to data corruption or unauthorized access.
Which versions of the Linux kernel are affected by CVE-2026-53171?
CVE-2026-53171 affects specific versions of the Linux kernel that utilize the Ethosu accelerator.
When was CVE-2026-53171 published?
CVE-2026-53171 was published on June 25, 2026.