accel/ivpu: Limit firmware log name prints to field size (CVE-2026-97915) | HOL Guard CVE

Unknown severity · Source severity not reportedCVE-2026-97915

accel/ivpu: Limit firmware log name prints to field size

Answer in brief

CVE-2026-97915 records a Unknown severity vulnerability in accel/ivpu: Limit firmware log name prints to field size. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.

Analysis pending evidence review

HOL Guard separates source facts from reviewed analysis. See the methodology.

Published Sep 25, 2026Updated Sep 25, 2026Source checked Sep 25, 2026First seen by HOL Sep 25, 2026Material review Sep 25, 2026

Upstream Advisory

Key facts

Risk: Unknown severitySource severity not reported
Exploitation: Not marked as known exploited
Affected software: 2 mapped packages or products
Fix availability: Available

Why this deserves its current priority

A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Analysis status

Analysis pending evidence review

Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.

Affected scope and exposure questions

The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.

Mapped affected packages and fixed versions
Package	Affected range	Fixed version
Linux/Linuxgeneric	>=d4e4257afa6ed5205eda993180401fc2c20e4b60 <6dbba89df4e842d226f5cd3dbc5e94533cfceea2 \|\| >=d4e4257afa6ed5205eda993180401fc2c20e4b60 <5d06257359c9006a208fece9eb7f0a0e83e0cc92 \|\| >=d4e4257afa6ed5205eda993180401fc2c20e4b60 <3d7130807009e9be6132c1394a2c7708a3ba39a7 \|\| >=d4e4257afa6ed5205eda993180401fc2c20e4b60 <95bf070f3225dc7175725438c916ad321d42fe45	6dbba89df4e842d226f5cd3dbc5e94533cfceea2, 5d06257359c9006a208fece9eb7f0a0e83e0cc92, 3d7130807009e9be6132c1394a2c7708a3ba39a7, 95bf070f3225dc7175725438c916ad321d42fe45
Linux/Linuxgeneric	6.6	Not reported

Recommended response

Check inventory. Check lockfiles and deployed manifests for Linux/Linux, Linux/Linux.
Review the reported fix. Update Linux/Linux to 6dbba89df4e842d226f5cd3dbc5e94533cfceea2 if you use the affected versions. Test the change in a non-production environment first.

Evidence timeline and material changes

Published upstream
Sep 25, 2026
Evidence: source:cvelist:source_dates:source-dates:record
Source modified
Sep 25, 2026
Evidence: source:cvelist:source_dates:source-dates:record
First seen by HOL
Sep 25, 2026

Sources and claim methodology

Upstream source description

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Limit firmware log name prints to field size The name in struct vpu_tracing_buffer_header is a fixed-size array populated by the NPU firmware. It is expected to be NUL-terminated, but nothing on the host side enforces this, so printing it with an unbounded string conversion would read past the field if the terminator is ever missing and expose adjacent bytes of the shared tracing BO through dmesg and the debugfs FW log output. Print at most as many characters as the name field holds, so the output never runs past it even if the string is not NUL-terminated.

Quoted source text, attributed separately from HOL analysis.