CVE-2026-97913: accel: ethosu: Ensure cmd stream ends with a stop op
In the Linux kernel, the following vulnerability has been resolved:
accel: ethosu: Ensure cmd stream ends with a stop op
While the QSIZE register setting should prevent an out of bounds access of the command stream, it is not clear whether the h/w generates an interrupt in this case as is required (to prevent a timeout). As a stop op is expected end of the command stream, let's just ensure it is present. A stop op in the middle of the command stream also makes no sense.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Ensure the command stream ends with a STOP op; a STOP op in the middle of the command stream is not valid.
Linux kernel accel: ethosu command stream termination = STOP op
Event History
Frequently Asked Questions
What condition triggers the problematic command-stream behavior?
The issue concerns a command stream that does not end with a stop operation. Although the QSIZE register is intended to prevent an out-of-bounds command-stream access, the hardware may not generate the interrupt needed to avoid a timeout in this condition.
What validation does the fix add?
The resolved code ensures that a stop operation is present at the end of the command stream. It also rejects the nonsensical case of a stop operation appearing in the middle of the stream.