Vulnerability-Lookup

GHSA-35P7-3VG5-CCVP

Vulnerability from github – Published: 2026-08-10 15:33 – Updated: 2026-08-14 00:31

Details

In the Linux kernel, the following vulnerability has been resolved:

accel: ethosu: Fix element size accounting for cmd stream validation

There are 2 issues with the element size handling in the command stream validation which result in too small of a size calculated when the element size is 16/32/64 bits.

For NHWC format, the element size is simply missing from the calculation.

The bitfield for the element size is different between IFM/IFM2 and OFM. IFM and IFM2 encode the precision in parameter bits 2:3, while OFM uses bits 1:2.

Severity

7.8 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-68316"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-08-10T13:20:21Z",
    "severity": "HIGH"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\naccel: ethosu: Fix element size accounting for cmd stream validation\n\nThere are 2 issues with the element size handling in the command stream\nvalidation which result in too small of a size calculated when the\nelement size is 16/32/64 bits.\n\nFor NHWC format, the element size is simply missing from the\ncalculation.\n\nThe bitfield for the element size is different between IFM/IFM2 and\nOFM. IFM and IFM2 encode the precision in parameter bits 2:3, while OFM\nuses bits 1:2.",
  "id": "GHSA-35p7-3vg5-ccvp",
  "modified": "2026-08-14T00:31:55Z",
  "published": "2026-08-10T15:33:45Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68316"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/18a551482a4a326790698b273e76d7575a51a57d"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/b4ae748f8e6cb65bb86e5a281bbb5b5e5f106527"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

CVE-2026-68316 (GCVE-0-2026-68316)

Vulnerability from cvelistv5 – Published: 2026-08-10 12:02 – Updated: 2026-08-17 05:03

Title

accel: ethosu: Fix element size accounting for cmd stream validation

Summary

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Fix element size accounting for cmd stream validation There are 2 issues with the element size handling in the command stream validation which result in too small of a size calculated when the element size is 16/32/64 bits. For NHWC format, the element size is simply missing from the calculation. The bitfield for the element size is different between IFM/IFM2 and OFM. IFM and IFM2 encode the precision in parameter bits 2:3, while OFM uses bits 1:2.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Assigner

Linux mitre root Scorecard

References

2 references

URL	Tags
https://git.kernel.org/stable/c/b4ae748f8e6cb65bb…
https://git.kernel.org/stable/c/18a551482a4a32679…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 5a5e9c0228e613f0ef2a58b9782d7c0ea8f1e58b , < b4ae748f8e6cb65bb86e5a281bbb5b5e5f106527 (git) Affected: 5a5e9c0228e613f0ef2a58b9782d7c0ea8f1e58b , < 18a551482a4a326790698b273e76d7575a51a57d (git)
Linux	Linux	Affected: 6.19 Unaffected: 0 , < 6.19 (semver) Unaffected: 7.1.6 , ≤ 7.1.* (semver) Unaffected: 7.2 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/accel/ethosu/ethosu_gem.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "b4ae748f8e6cb65bb86e5a281bbb5b5e5f106527",
              "status": "affected",
              "version": "5a5e9c0228e613f0ef2a58b9782d7c0ea8f1e58b",
              "versionType": "git"
            },
            {
              "lessThan": "18a551482a4a326790698b273e76d7575a51a57d",
              "status": "affected",
              "version": "5a5e9c0228e613f0ef2a58b9782d7c0ea8f1e58b",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/accel/ethosu/ethosu_gem.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.19"
            },
            {
              "lessThan": "6.19",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.6",
                  "versionStartIncluding": "6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "6.19",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\naccel: ethosu: Fix element size accounting for cmd stream validation\n\nThere are 2 issues with the element size handling in the command stream\nvalidation which result in too small of a size calculated when the\nelement size is 16/32/64 bits.\n\nFor NHWC format, the element size is simply missing from the\ncalculation.\n\nThe bitfield for the element size is different between IFM/IFM2 and\nOFM. IFM and IFM2 encode the precision in parameter bits 2:3, while OFM\nuses bits 1:2."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerability is reached only through ioctls on the local Ethos-U DRM accel device node (/dev/accel/accelN) \u2014 DRM_IOCTL_ETHOSU_CMDSTREAM_BO_CREATE followed by ETHOSU_SUBMIT. There is no network or remote input path into the command stream validator.\nAC:L - Every input to the flawed calculation (precision, depth, width, strides, base addresses, region) comes straight from the attacker\u0027s command stream, so the undercounted size check can be triggered deterministically on every attempt. No race, timing window, or uncontrollable memory layout is involved.\nPR:L - Only an open file descriptor on the accel render node is needed; no capability, DRM_AUTH, or DRM_ROOT_ONLY flag guards any of the ethosu ioctls. On the Android/embedded systems where Ethos-U NPUs ship, this node is exposed to ordinary unprivileged inference applications.\nUI:N - The attacker performs the entire sequence itself \u2014 create a BO, create a crafted command-stream BO, submit the job. No victim action, file, or pre-existing state is required.\nS:U - The undersized validation lets the NPU DMA outside the buffer into other kernel-managed memory, but both the vulnerable driver and the corrupted resources belong to the same kernel security authority; no VM, IOMMU domain, or sandbox boundary is crossed.\nC:H - Undercounting the input feature map extent makes the NPU DMA-read physical memory well past the end of the BO (hundreds of KB to megabytes, attacker-chosen via depth/width/strides), and the results are written into an output BO that userspace mmaps, giving a practical arbitrary kernel-memory disclosure primitive.\nI:H - The same undercount applies to the output feature map, so the NPU DMA-writes attacker-influenced computation results past the end of the buffer into adjacent kernel/CMA memory. This is a controlled out-of-bounds write performed by the device, bypassing CPU page protections and exploitable for privilege escalation.\nA:H - Out-of-bounds DMA writes into arbitrary adjacent physical memory readily corrupt kernel data structures or other drivers\u0027 DMA buffers, producing oopses, panics, or platform-level aborts; on IOMMU-equipped platforms the stray access instead triggers a fatal translation fault."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T05:03:13.193Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/b4ae748f8e6cb65bb86e5a281bbb5b5e5f106527"
        },
        {
          "url": "https://git.kernel.org/stable/c/18a551482a4a326790698b273e76d7575a51a57d"
        }
      ],
      "title": "accel: ethosu: Fix element size accounting for cmd stream validation",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-68316",
    "datePublished": "2026-08-10T12:02:51.141Z",
    "dateReserved": "2026-07-30T09:28:09.382Z",
    "dateUpdated": "2026-08-17T05:03:13.193Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

GHSA-35P7-3VG5-CCVP

CVE-2026-68316 (GCVE-0-2026-68316)

Tags

Sightings

Nomenclature

Related by attack behaviour