CVE-2026-53206

MEDIUM

accel/ivpu: Add bounds check for firmware runtime memory

Title source: cna

Description

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add bounds check for firmware runtime memory Validate that the firmware runtime memory specified in the image header is properly aligned and sized to hold the firmware image. This prevents errors during memory allocation and image transfer.

References (2)

Core 2

Core References

https://git.kernel.org/stable/c/f8ab60ae9309e76d9a09c601c10cc222e25b3d5b

https://git.kernel.org/stable/c/1d0b597facdd3c0239c88e8797c1014e1ea0ef15

Scores

CVSS v3 5.5

EPSS 0.0011

EPSS Percentile 1.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (9)

linux/Kernel 6.19.0 - 7.0.13linux

Linux/Linux < 6.19

Linux/Linux 2007e210b6a188efc35160ff9f2780581fe56941 - 1d0b597facdd3c0239c88e8797c1014e1ea0ef15

Linux/Linux 2007e210b6a188efc35160ff9f2780581fe56941 - f8ab60ae9309e76d9a09c601c10cc222e25b3d5b

Linux/Linux 6.19

Linux/Linux 7.0.13 - 7.0.*

Linux/Linux 7.1

linux/linux_kernel 7.1 rc1 (6 CPE variants)

linux/linux_kernel 6.19 - 7.0.13

Published Jun 25, 2026

Tracked Since Jun 25, 2026