CVE-2026-53206
Analyzed Analyzed - Analysis Complete

Bounds Check Bypass in Linux Kernel IVPU Driver

Publication date: 2026-06-25

Last updated on: 2026-07-02

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add bounds check for firmware runtime memory Validate that the firmware runtime memory specified in the image header is properly aligned and sized to hold the firmware image. This prevents errors during memory allocation and image transfer.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-06-25
Last Modified
2026-07-02
Generated
2026-07-15
AI Q&A
2026-06-25
EPSS Evaluated
2026-07-14
NVD
CVE-2026-53206
EUVD
EUVD-2026-39297

Affected Vendors & Products

Showing 7 associated CPEs
Vendor Product Version / Range
linux linux_kernel 7.1
linux linux_kernel 7.1
linux linux_kernel 7.1
linux linux_kernel 7.1
linux linux_kernel From 6.19 (inc) to 7.0.13 (exc)
linux linux_kernel 7.1
linux linux_kernel 7.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel relates to the accel/ivpu component where there was no proper bounds checking for firmware runtime memory.

The issue was that the firmware runtime memory specified in the image header was not validated to ensure it was properly aligned and sized to hold the firmware image.

This lack of validation could lead to errors during memory allocation and image transfer processes.

The vulnerability has been resolved by adding bounds checks to validate the firmware runtime memory.

Impact Analysis

If unpatched, this vulnerability could cause errors during memory allocation and firmware image transfer in the Linux kernel's accel/ivpu component.

Such errors might lead to system instability, crashes, or potentially allow for unexpected behavior in the firmware loading process.

However, no specific details about exploitation or broader impacts are provided.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-53206. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart