High 7.8Published Jun 25, 2026

CVE-2026-53202accel/ivpu: Fix signed integer truncation in IPC receive

Updated under an hour ago (Oct 26, 2026, 4:40 PM ET)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix signed integer truncation in IPC receive Fix potential buffer overflow where firmware-supplied data_size is cast to signed int before being used in min_t(). Large unsigned values (>= 0x80000000) become negative, causing unsigned wraparound and oversized memcpy operations that can overflow the stack buffer. Change min_t(int, ...) to min() as both values are unsigned and can be handled by min() without explicit cast.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-787, CWE-190
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 3b434a3445fff3149128db0169da864d67057325 before 4788556d4dd9d717037e385de178974e9649231d; from 3b434a3445fff3149128db0169da864d67057325 before 45cb105b8642c65e9be286f7058e92314efe7ea3; from 3b434a3445fff3149128db0169da864d67057325 before 2821bf2b79e47f87e1dbdd9d25c78240965a97d6; from 3b434a3445fff3149128db0169da864d67057325 before d9faef564438d1e4579c692c046603e7ada7bdf4	CNA record
Red Hat Red Hat Enterprise Linux 10 redhat:enterprise_linux	from 0:6.12.0-211.47.1.el10_2 not affected	CISA ADP
linux linux_kernel linux:linux_kernel	from 6.8 before 6.12.94; from 6.13 before 6.18.36; from 6.19 before 7.0.13; 7.1; 7.1; 7.1; 7.1; 7.1; and 2 more ranges	NVD

References

References

https://git.kernel.org/stable/c/4788556d4dd9d717037e385de178974e9649231d	patch
https://git.kernel.org/stable/c/45cb105b8642c65e9be286f7058e92314efe7ea3	patch
https://git.kernel.org/stable/c/2821bf2b79e47f87e1dbdd9d25c78240965a97d6	patch
https://git.kernel.org/stable/c/d9faef564438d1e4579c692c046603e7ada7bdf4	patch
https://access.redhat.com/errata/RHSA-2026:54343
https://access.redhat.com/errata/RHSA-2026:54443
https://access.redhat.com/security/cve/CVE-2026-53202	third-party-advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2492823	third-party-advisory
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53202.json	third-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.