Description
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add buffer overflow check in MS get_info_ioctl Add validation that the info size returned from the metric stream info query is not exceeded when checked against the allocated buffer size. If the firmware returns a size larger than the buffer, reject the operation with -EOVERFLOW instead of proceeding with an incorrect buffer copy.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
cdfad4db7756563db7d458216d9e3c2651dddc7d to < d3c12ed33e8923f3090909a1738f3e59292996a6affectedcdfad4db7756563db7d458216d9e3c2651dddc7d to < fa598556ecef412edcb391f144b7642e18fdfd45affectedcdfad4db7756563db7d458216d9e3c2651dddc7d to < 4e5047cc94bea1cc7b670b7f503358e9af0542dfaffectedcdfad4db7756563db7d458216d9e3c2651dddc7d to < fb176425837693f50c5c9fc8db6fbb04af22bd0aaffected
Linux Linux
Default version status: affected
6.11affected0 to < 6.11unaffected6.12.94 to ≤ 6.12.*unaffected6.18.36 to ≤ 6.18.*unaffected7.0.13 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/d3c12ed33e8923f3090909a1738f3e59292996a6 ↗
- https://git.kernel.org/stable/c/fa598556ecef412edcb391f144b7642e18fdfd45 ↗
- https://git.kernel.org/stable/c/4e5047cc94bea1cc7b670b7f503358e9af0542df ↗
- https://git.kernel.org/stable/c/fb176425837693f50c5c9fc8db6fbb04af22bd0a ↗
- https://access.redhat.com/security/cve/CVE-2026-53203 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2492798 ↗
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53203.json ↗