GHSA-vvxc-w7f5-6422HighCVSS 7.8

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix page fault...

Published
December 24, 2025
Last Modified
July 30, 2026

🔗 CVE IDs covered (1)

📋 Description

In the Linux kernel, the following vulnerability has been resolved:

accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context()

Don't add BO to the vdev->bo_list in ivpu_gem_create_object(). When failure happens inside drm_gem_shmem_create(), the BO is not fully created and ivpu_gem_bo_free() callback will not be called causing a deleted BO to be left on the list.

🔗 References (5)