Microsoft Security Response Center guidance
Vendor revision: Nov 7, 2026Release Notes
Vendor-listed releases
- 6.6.161.1-1
Vulnerability intelligence
CVE-2026-97917. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
Release Notes
Vendor-listed releases
In the Linux kernel, the following vulnerability has been resolved:
accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr
Add a size parameter to ivpu_to_cpu_addr() and validate that the whole [vpu_addr, vpu_addr + size) range stays within the BO.
Source: NVD