In the Linux kernel, the following vulnerability has been resolved:

accel/ivpu: Add buffer overflow check in MS get_info_ioctl

Add validation that the info size returned from the metric stream info
query is not exceeded when checked against the allocated buffer size.
If the firmware returns a size larger than the buffer, reject the
operation with -EOVERFLOW instead of proceeding with an incorrect
buffer copy.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00193.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
cdfad4db7756563db7d458216d9e3c2651dddc7d affected < d3c12ed33e8923f3090909a1738f3e59292996a6
cdfad4db7756563db7d458216d9e3c2651dddc7d affected < fa598556ecef412edcb391f144b7642e18fdfd45
cdfad4db7756563db7d458216d9e3c2651dddc7d affected < 4e5047cc94bea1cc7b670b7f503358e9af0542df
cdfad4db7756563db7d458216d9e3c2651dddc7d affected < fb176425837693f50c5c9fc8db6fbb04af22bd0a
Linux Linux affected
Version Status Constraints
6.11 affected —
0 unaffected < 6.11
6.12.94 unaffected ≤ 6.12.*
6.18.36 unaffected ≤ 6.18.*
7.0.13 unaffected ≤ 7.0.*
7.1 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/4e5047cc94bea1cc7b670b7f503358e9af0542df cve-icon
https://git.kernel.org/stable/c/d3c12ed33e8923f3090909a1738f3e59292996a6 cve-icon
https://git.kernel.org/stable/c/fa598556ecef412edcb391f144b7642e18fdfd45 cve-icon
https://git.kernel.org/stable/c/fb176425837693f50c5c9fc8db6fbb04af22bd0a cve-icon
History

Thu, 25 Jun 2026 12:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-119

Thu, 25 Jun 2026 09:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add buffer overflow check in MS get_info_ioctl Add validation that the info size returned from the metric stream info query is not exceeded when checked against the allocated buffer size. If the firmware returns a size larger than the buffer, reject the operation with -EOVERFLOW instead of proceeding with an incorrect buffer copy.
Title accel/ivpu: Add buffer overflow check in MS get_info_ioctl
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-06-25T08:39:10.950Z

Reserved: 2026-06-09T07:44:35.391Z

Link: CVE-2026-53203

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-25T12:30:06Z

Weaknesses