Riskcovery

CVE-2026-53203

accel/ivpu: Add buffer overflow check in MS get_info_ioctl

State
Published
Severity
7.1 High
Published
Jun 25, 2026
Updated
Oct 19, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

accel/ivpu: Add buffer overflow check in MS get_info_ioctl

Add validation that the info size returned from the metric stream info query is not exceeded when checked against the allocated buffer size. If the firmware returns a size larger than the buffer, reject the operation with -EOVERFLOW instead of proceeding with an incorrect buffer copy.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HLinux
3.17.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hredhat-SADP

Weaknesses

  • CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected Products

ProductVersions
LinuxLinux
  • cdfad4db7756563db7d458216d9e3c2651dddc7d to before d3c12ed33e8923f3090909a1738f3e59292996a6Affected
  • cdfad4db7756563db7d458216d9e3c2651dddc7d to before fa598556ecef412edcb391f144b7642e18fdfd45Affected
  • cdfad4db7756563db7d458216d9e3c2651dddc7d to before 4e5047cc94bea1cc7b670b7f503358e9af0542dfAffected
  • cdfad4db7756563db7d458216d9e3c2651dddc7d to before fb176425837693f50c5c9fc8db6fbb04af22bd0aAffected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.12.94 through 6.12.*Not affected
  • 6.18.36 through 6.18.*Not affected
  • 7.0.13 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.