---
id: CVE-2026-53203
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  accel/ivpu: Add buffer overflow check in MS get_info_ioctl

  Add validation that the info size returned from the metric stream info
  query is not exceeded when checked ag…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  accel/ivpu: Add buffer overflow check in MS get_info_ioctl

  Add validation that the info size returned from the metric stream info
  query is not exceeded when checked ag…
severity: high
cvss: 7.1
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H'
cwe:
  - CWE-787
  - CWE-120
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 6.11, < 6.12.94'
  - 'linux_kernel >= 6.13, < 6.18.36'
  - 'linux_kernel >= 6.19, < 7.0.13'
  - linux_kernel = 7.1
patched:
  - linux_kernel 7.0.13
published: '2026-06-25'
updated: '2026-07-02'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-53203'
references:
  - url: 'https://git.kernel.org/stable/c/4e5047cc94bea1cc7b670b7f503358e9af0542df'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d3c12ed33e8923f3090909a1738f3e59292996a6'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/fa598556ecef412edcb391f144b7642e18fdfd45'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/fb176425837693f50c5c9fc8db6fbb04af22bd0a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://access.redhat.com/security/cve/CVE-2026-53203'
    label: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2492798'
    label: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53203.json
    label: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-53203'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-53203'
  - url: >-
      https://lore.kernel.org/linux-cve-announce/2026062501-CVE-2026-53203-2c14@gregkh/T
  - url: 'https://access.redhat.com/errata/RHSA-2026:71602'
tags:
  - nvd
  - csaf
  - vex
  - red-hat
epss: 0.00143
epssPercentile: 0.02901
ingestedAt: '2026-07-03T13:02:28.013Z'
scores:
  nvd: 7.1
  vendor: 7
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

accel/ivpu: Add buffer overflow check in MS get_info_ioctl

Add validation that the info size returned from the metric stream info
query is not exceeded when checked against the allocated buffer size.
If the firmware returns a size larger than the buffer, reject the
operation with -EOVERFLOW instead of proceeding with an incorrect
buffer copy.

## Affected

- `linux_kernel >= 6.11, < 6.12.94`
- `linux_kernel >= 6.13, < 6.18.36`
- `linux_kernel >= 6.19, < 7.0.13`
- `linux_kernel = 7.1`

## Remediation

Upgrade past the affected range:

- `linux_kernel 7.0.13`

## Vendor advisories

- **RHSA-2026:71602** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10), Red Hat Enterprise Linux Real Time for NFV (v. 10), Red Hat Enterprise Linux Real Time (v. 10) · released 2026-09-24 · [advisory](https://access.redhat.com/errata/RHSA-2026:71602)
- **Red Hat VEX** · Important · affected: Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 9 · updated 2026-09-24 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53203.json)