CVE-2026-53203 Details
Description
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add buffer overflow check in MS get_info_ioctl Add validation that the info size returned from the metric stream info query is not exceeded when checked against the allocated buffer size. If the firmware returns a size larger than the buffer, reject the operation with -EOVERFLOW instead of proceeding with an incorrect buffer copy.
A buffer overflow vulnerability has been addressed in the Linux kernel's IVPU driver. The issue arose in the 'get_info_ioctl' function, where the size of information returned by the firmware could exceed the allocated buffer size. This oversight could lead to incorrect buffer copies, potentially causing memory corruption. The vulnerability affects Linux kernel versions through 6.18.
Users can upgrade to Linux kernel versions 6.19 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2026-53203 | redhat-SADP | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2492798 | redhat-SADP | Third Party Advisory |
| https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53203.json | redhat-SADP | Third Party Advisory |
| https://git.kernel.org/stable/c/4e5047cc94bea1cc7b670b7f503358e9af0542df | kernel.org | Patch |
| https://git.kernel.org/stable/c/d3c12ed33e8923f3090909a1738f3e59292996a6 | kernel.org | Patch |
| https://git.kernel.org/stable/c/fa598556ecef412edcb391f144b7642e18fdfd45 | kernel.org | Patch |
| https://git.kernel.org/stable/c/fb176425837693f50c5c9fc8db6fbb04af22bd0a | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-787 | Out-of-bounds Write | [email protected] |
| CWE-120 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') | redhat-SADP |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.11, < 6.12.94 >= 6.13, < 6.18.36 >= 6.19, < 7.0.13 7.1 rc1 7.1 rc2 7.1 rc3 7.1 rc4 7.1 rc5 7.1 rc6 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 15, 2026 | CVE Modified | redhat-SADP |
| Jul 2, 2026 | Initial Analysis | [email protected] |
| Jun 30, 2026 | CVE Modified | redhat-SADP |
| Jun 28, 2026 | CVE Modified | kernel.org |
| Jun 25, 2026 | New CVE Received | kernel.org |