CVE-2026-53203

Katalog CVE

CVSS 7.1 · High EPSS 0,14%

Kerentanan Out-of-bounds Write pada linux kernel. Skor CVSS 3.1 7.1 (High) menurut CNA.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add buffer overflow check in MS get_info_ioctl Add validation that the info size returned from the metric stream info query is not exceeded when checked against the allocated buffer size. If the firmware returns a size larger than the buffer, reject the operation with -EOVERFLOW instead of proceeding with an incorrect buffer copy.

Rincian

Terbit di NVD

25 Juni 2026

Terakhir diubah

15 Juli 2026

Status NVD

Analyzed

CVSS 3.1

7.1 (High), sumber CNA
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

0,14% peluang dieksploitasi; lebih tinggi dari 3,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/4e5047cc94bea1cc7b670b7f503358e9af0542df patch
• https://git.kernel.org/stable/c/d3c12ed33e8923f3090909a1738f3e59292996a6 patch
• https://git.kernel.org/stable/c/fa598556ecef412edcb391f144b7642e18fdfd45 patch
• https://git.kernel.org/stable/c/fb176425837693f50c5c9fc8db6fbb04af22bd0a patch
• https://access.redhat.com/security/cve/CVE-2026-53203 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2492798 advisory pihak ketiga
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53203.json advisory pihak ketiga