Executive brief
A vulnerability in the Linux kernel's IP Accelerator (IPA) driver could allow a local user to cause a system warning or potential instability. The issue stems from incorrect hardware register settings when managing network acceleration components. While primarily affecting system reliability, it could lead to a denial-of-service condition on impacted devices.
Technical details
The vulnerability exists in the net: ipa component of the Linux kernel, specifically within the GSI (Generic Software Interface) register definitions for IPA version 5.0 and above. The GENERIC_CMD register field masks did not match the actual hardware layout documented in downstream specifications, leading to incorrect bit offsets for GENERIC_CHID and GENERIC_EE, and missing the GENERIC_PARAMS field. An attacker with local access could trigger these incorrect register writes, potentially causing kernel warnings (WARN) or unexpected hardware behavior when interacting with the Modem Peripheral Subsystem (MPSS). Patches have been released across multiple stable kernel branches to align the masks with the correct hardware layout.
Affected products
- Linux Linux Kernel 6.4 to 6.6.136, 6.7 to 6.12.83, 6.13 to 6.18.24, 6.19 to 6.19.14, 7.0-rc1 to 7.0-rc7
Timeline
- 2026-04-03: other: Patch authored
- 2026-05-06: disclosed: CVE published
- 2026-06-01: advisory: NVD enrichment and analysis completed
References
- https://git.kernel.org/stable/c/2aa50d2c1f631b405849da246043c6f683af7489
- https://git.kernel.org/stable/c/9709b56d908acc120fe8b4ae250b3c9d749ea832
- https://git.kernel.org/stable/c/a7d326dfb13b5a0763eccfd78836fe15199fc499
- https://git.kernel.org/stable/c/bafc45ea30d297002750396d5f10e3018bf2cd60
- https://git.kernel.org/stable/c/d1c66396796f23f7201b1addf06f62515035354d