7.8
/ 10
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
In the Linux kernel, the following vulnerability has been resolved:
accel/ivpu: Fix signed integer truncation in IPC receive
Fix potential buffer overflow where firmware-supplied data_size is cast
to signed int before being used in min_t(). Large unsigned values
(>= 0x80000000) become negative, causing unsigned wraparound and
oversized memcpy operations that can overflow the stack buffer.
Change min_t(int, ...) to min() as both values are unsigned and can be
handled by min() without explicit cast.
accel/ivpu: Fix signed integer truncation in IPC receive
Fix potential buffer overflow where firmware-supplied data_size is cast
to signed int before being used in min_t(). Large unsigned values
(>= 0x80000000) become negative, causing unsigned wraparound and
oversized memcpy operations that can overflow the stack buffer.
Change min_t(int, ...) to min() as both values are unsigned and can be
handled by min() without explicit cast.
Basic Information
ID
CVE-2026-53202
Source
Linux
Published
Jun 25, 2026 at 08:39
Modified
Jun 28, 2026 at 06:40
Affected Product
Vendor
Linux
Product
Linux
Version
3b434a3445fff3149128db0169da864d67057325
Affected Versions
Linux Linux 3b434a3445fff3149128db0169da864d67057325
Linux Linux 3b434a3445fff3149128db0169da864d67057325
Linux Linux 3b434a3445fff3149128db0169da864d67057325
Linux Linux 3b434a3445fff3149128db0169da864d67057325
Linux Linux 6.8
Linux Linux 3b434a3445fff3149128db0169da864d67057325
Linux Linux 3b434a3445fff3149128db0169da864d67057325
Linux Linux 3b434a3445fff3149128db0169da864d67057325
Linux Linux 6.8