CVE-2026-53203

Analyzed Analyzed - Analysis Complete

Buffer Overflow in Linux Kernel accel/ivpu Driver

Publication date: 2026-06-25

Last updated on: 2026-07-15

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add buffer overflow check in MS get_info_ioctl Add validation that the info size returned from the metric stream info query is not exceeded when checked against the allocated buffer size. If the firmware returns a size larger than the buffer, reject the operation with -EOVERFLOW instead of proceeding with an incorrect buffer copy.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-25

Last Modified

2026-07-15

Generated

2026-07-15

AI Q&A

2026-06-25

EPSS Evaluated

2026-07-14

NVD

CVE-2026-53203

EUVD

EUVD-2026-39294

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 6.13 (inc) to 6.18.36 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.0.13 (exc)
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 6.11 (inc) to 6.12.94 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a buffer overflow issue in the Linux kernel's accel/ivpu component, specifically in the MS get_info_ioctl function.

The problem occurs because the size of the information returned by the metric stream info query was not properly validated against the allocated buffer size.

If the firmware returned a size larger than the buffer, the operation would proceed incorrectly, potentially causing a buffer overflow.

The fix added a check to ensure that if the returned size exceeds the buffer size, the operation is rejected with an -EOVERFLOW error instead of copying incorrect data.

Impact Analysis

A buffer overflow vulnerability can lead to memory corruption, which may cause system instability, crashes, or potentially allow an attacker to execute arbitrary code with kernel privileges.

Exploiting this vulnerability could compromise the security and reliability of the affected Linux system.

Hi! I’m here to help you understand CVE-2026-53203. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70