PT-2026-52298 · Linux+1 · Linux Kernel+1

CVE-2026-53202

·

Published

2026-06-09

·

Updated

2026-09-07

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the accel/ivpu component where firmware-supplied data size is cast to a signed integer before being processed by the min t() function. When large unsigned values (greater than or equal to 0x80000000) are provided, they are interpreted as negative numbers. This leads to unsigned wraparound and oversized memcpy() operations, which can result in a stack buffer overflow.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Uncontrolled Recursion

Integer Overflow

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2026:54343
ALSA-2026:54443
BDU:2026-14034
CVE-2026-53202
OPENSUSE-SU-2026:21555-1
RHSA-2026:54343
RHSA-2026:54443
SUSE-SU-2026:23066-1
SUSE-SU-2026:23068-1
SUSE-SU-2026:23221-1
SUSE-SU-2026:23231-1
SUSE-SU-2026:23237-1
SUSE-SU-2026:3130-1
SUSE-SU-2026:3166-1
USN-8726-1
USN-8727-1
USN-8728-1

Affected Products

Linux Kernel
Rocky Linux