A missing validation of the full memory range in the Linux kernel function ivpu_to_cpu_addr allows an attacker to map a buffer that extends beyond the intended bounds. This out‑of‑bounds memory access can corrupt kernel data structures or overwrite arbitrary memory, potentially leading to execution of malicious code or system instability. The weakness is a classic case of an unchecked buffer range and falls under CWE-787, the out‑of‑bounds write flaw.

The flaw exists in the generic Linux kernel and its accelerated VPU (ivpu) subsystem. No specific version information is provided; therefore, any kernel build that includes the affected ivpu_to_cpu_addr implementation is potentially vulnerable until the patch that adds the size parameter is applied.

The likely attack vector is local exploitation via a crafted buffer injected into the kernel’s VPU subsystem, as the description does not mention remote exploitation. The CVSS score of 5.5 indicates moderate severity, and the EPSS score of less than 1% suggests a low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires local access to inject a crafted buffer into the kernel's VPU subsystem, which is typically achievable by a user with elevated privileges. Because the attack can corrupt kernel memory, it remains a potential vector for privilege escalation to full kernel control.