CVE 7.8 HIGH

accel/ivpu: Fix signed integer truncation in IPC receive_CVE-2026-53202

7.8 / 10
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

In the Linux kernel, the following vulnerability has been resolved:

accel/ivpu: Fix signed integer truncation in IPC receive

Fix potential buffer overflow where firmware-supplied data_size is cast
to signed int before being used in min_t(). Large unsigned values
(>= 0x80000000) become negative, causing unsigned wraparound and
oversized memcpy operations that can overflow the stack buffer.

Change min_t(int, ...) to min() as both values are unsigned and can be
handled by min() without explicit cast.

Basic Information

ID CVE-2026-53202
Source Linux
Published Jun 25, 2026 at 08:39
Modified Jun 28, 2026 at 06:40

Affected Product

Vendor Linux
Product Linux
Version 3b434a3445fff3149128db0169da864d67057325
Affected Versions Linux Linux 3b434a3445fff3149128db0169da864d67057325
Linux Linux 3b434a3445fff3149128db0169da864d67057325
Linux Linux 3b434a3445fff3149128db0169da864d67057325
Linux Linux 3b434a3445fff3149128db0169da864d67057325
Linux Linux 6.8

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.