CVE-2026-53169
Description
A flaw was found in the Linux kernel's accel/ethosu driver. An unprivileged local user with access to the Direct Rendering Manager (DRM) device could submit a specific command (NPU_OP_RESIZE) that the driver does not properly handle. This could lead to excessive kernel log spam and, if the panic_on_warn setting is enabled, cause the kernel to crash, resulting in a denial of service (DoS).
Understanding the Weakness (CWE)
Availability
Technical Impact: DoS: Crash, Exit, or Restart
An attacker that can trigger an assert statement can still lead to a denial of service if the relevant code can be triggered by an attacker, and if the scope of the assert() extends beyond the attacker's own session.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
