PT-2026-52265 · Linux · Linux
Published
2026-06-25
·
Updated
2026-06-25
·
CVE-2026-53169
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
accel/ethosu: reject NPU OP RESIZE commands from userspace
NPU OP RESIZE is a U85-only command that the driver does not yet
implement. The existing WARN ON(1) placeholder fires unconditionally
whenever userspace submits this command via DRM IOCTL ETHOSU GEM CREATE,
causing unbounded kernel log spam.
If panic on warn is set the kernel panics, giving any unprivileged user
with access to the DRM device a trivial denial-of-service primitive.
Replace the WARN ON(1) with an explicit -EINVAL return so the ioctl
rejects the command before it reaches hardware.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux