CVE-2026-53206: accel/ivpu: Add bounds check for firmware runtime memory

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-06-25 · updated 2026-07-02

Description

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add bounds check for firmware runtime memory Validate that the firmware runtime memory specified in the image header is properly aligned and sized to hold the firmware image. This prevents errors during memory allocation and image transfer.

Affected products

Linux kernel: from 6.19 before 7.0.13; 7.1-rc1, 7.1-rc2, 7.1-rc3, 7.1-rc4, 7.1-rc5, 7.1-rc6 — fixed in 7.0.13

How to fix

Upgrade to a fixed version: Linux kernel 7.0.13. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/1d0b597facdd3c0239c88e8797c1014e1ea0ef15
https://git.kernel.org/stable/c/f8ab60ae9309e76d9a09c601c10cc222e25b3d5b

Get alerted when CVE-2026-53206 or the next vulnerability affects your stack