The vulnerability stems from an inaccurate calculation of packet element sizes in the Linux kernel’s ethosu GPU accelerator command stream validator. Because the size of 16, 32, and 64‑bit elements is mis‑computed—sometimes omitted entirely for NHWC layouts—the validator reports a buffer requirement that is smaller than the actual command needs. This mismatch could allow the driver to copy data past the end of a buffer, leading to kernel memory corruption. The CVE text does not document a successful exploitation, so the possibility of a buffer overflow is inferred from the description.

Any Linux kernel that includes the ethosu accelerator subsystem and has not yet incorporated the commits 18a551482a4a326790698b273e76d7575a51a57d or b4ae748f8e6cb65bb86e5a281bbb5b5e5f106527 is potentially vulnerable. Versions prior to the application of these patches should be considered at risk.

The CVSS score of 7.8 indicates high severity, while an EPSS score of less than 1% suggests very low likelihood of exploitation. The flaw requires interaction with the GPU accelerator interface, which typically necessitates local or privileged access; therefore remote exploitation is unlikely. At present, the vulnerability is not listed in the CISA KEV catalog. Overall, the risk remains high for systems that are vulnerable and reachable by a local adversary.