In the Linux kernel, the following vulnerability has been resolved:

accel/ivpu: Fix signed integer truncation in IPC receive

Fix potential buffer overflow where firmware-supplied data_size is cast
to signed int before being used in min_t(). Large unsigned values
(>= 0x80000000) become negative, causing unsigned wraparound and
oversized memcpy operations that can overflow the stack buffer.

Change min_t(int, ...) to min() as both values are unsigned and can be
handled by min() without explicit cast.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00193.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
3b434a3445fff3149128db0169da864d67057325 affected < 4788556d4dd9d717037e385de178974e9649231d
3b434a3445fff3149128db0169da864d67057325 affected < 45cb105b8642c65e9be286f7058e92314efe7ea3
3b434a3445fff3149128db0169da864d67057325 affected < 2821bf2b79e47f87e1dbdd9d25c78240965a97d6
3b434a3445fff3149128db0169da864d67057325 affected < d9faef564438d1e4579c692c046603e7ada7bdf4
Linux Linux affected
Version Status Constraints
6.8 affected —
0 unaffected < 6.8
6.12.94 unaffected ≤ 6.12.*
6.18.36 unaffected ≤ 6.18.*
7.0.13 unaffected ≤ 7.0.*
7.1 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/2821bf2b79e47f87e1dbdd9d25c78240965a97d6 cve-icon
https://git.kernel.org/stable/c/45cb105b8642c65e9be286f7058e92314efe7ea3 cve-icon
https://git.kernel.org/stable/c/4788556d4dd9d717037e385de178974e9649231d cve-icon
https://git.kernel.org/stable/c/d9faef564438d1e4579c692c046603e7ada7bdf4 cve-icon
History

Thu, 25 Jun 2026 11:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-680

Thu, 25 Jun 2026 09:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix signed integer truncation in IPC receive Fix potential buffer overflow where firmware-supplied data_size is cast to signed int before being used in min_t(). Large unsigned values (>= 0x80000000) become negative, causing unsigned wraparound and oversized memcpy operations that can overflow the stack buffer. Change min_t(int, ...) to min() as both values are unsigned and can be handled by min() without explicit cast.
Title accel/ivpu: Fix signed integer truncation in IPC receive
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-06-25T08:39:10.287Z

Reserved: 2026-06-09T07:44:35.391Z

Link: CVE-2026-53202

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-25T11:30:06Z

Weaknesses