Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
Linux Kernel: Potential Stack Overflow in IVPU Receive
published 4 months ago
Summary
A bug in the Linux kernel's IVPU (Intel Video Processing Unit) driver could cause a stack overflow when receiving data from the firmware. This is fixed by a change in how the kernel handles certain data sizes. To fix this issue, kernel updates should be applied to ensure the latest security patches are in place.
What to do
- Update linux kernel to version 7.0.13.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Linux | linux | kernel |
>= 6.19.0, < 7.0.13 Fix: upgrade to 7.0.13
|
Original advisory text
accel/ivpu: Fix signed integer truncation in IPC receive
In the Linux kernel, the following vulnerability has been resolved:
accel/ivpu: Fix signed integer truncation in IPC receive
Fix potential buffer overflow where firmware-supplied data_size is cast
to signed int before being used in min_t(). Large unsigned values
(>= 0x80000000) become negative, causing unsigned wraparound and
oversized memcpy operations that can overflow the stack buffer.
Change min_t(int, ...) to min() as both values are unsigned and can be
handled by min() without explicit cast.
accel/ivpu: Fix signed integer truncation in IPC receive
Fix potential buffer overflow where firmware-supplied data_size is cast
to signed int before being used in min_t(). Large unsigned values
(>= 0x80000000) become negative, causing unsigned wraparound and
oversized memcpy operations that can overflow the stack buffer.
Change min_t(int, ...) to min() as both values are unsigned and can be
handled by min() without explicit cast.
References
- https://git.kernel.org/stable/c/2821bf2b79e47f87e1dbdd9d25c78240965a97d6 URL
- https://git.kernel.org/stable/c/45cb105b8642c65e9be286f7058e92314efe7ea3 URL
- https://git.kernel.org/stable/c/4788556d4dd9d717037e385de178974e9649231d URL
- https://git.kernel.org/stable/c/d9faef564438d1e4579c692c046603e7ada7bdf4 URL
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53202.json URL
- https://access.redhat.com/errata/RHSA-2026:54343 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:54443 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-53202 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53202... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-53202 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2492823 Third Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published25 Jun 2026
Updated16 Aug 2026
First seen16 Aug 2026
Track software like this
Free during beta