CVE-2026-97911

CVE CVE-2026-97911EUVD EUVD-2026-86765Published 2026-09-25T10:22:34.000ZLast changed 2026-09-25T14:41:37.000ZCVSS 7.8

What the advisory describes

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM region size matches job It is possible for userspace to set the job SRAM size to 0, but then still have SRAM accesses in the command stream. When the job SRAM size is 0, setting the region base register is skipped and a stale base address from a prior job is used. Check the region size against the job's SRAM size instead of just the size of the SRAM. The job's SRAM size was already checked against the total SRAM size.

Source: EUVD (ENISA), in the words of the advisory.

Products the advisory names

These come from the advisory itself, not from any check we performed.

• Linux — Linux patch: 0; 7.2; patch: 7.3-rc3; patch: 7.2.7; 9cff90774872ed6613b7571ce018b5b455d86890 <50c27d412fedc95b8d54d477af47451a382e8cdd; 9cff90774872ed6613b7571ce018b5b455d86890 <2b39d680c9e0fb4d625f2916980977622e84248c

The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.

Carried in the product catalogue

An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.

• Linux — Linux

Patchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.