CVE-2026-53202

Description

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix signed integer truncation in IPC receive Fix potential buffer overflow where firmware-supplied data_size is cast to signed int before being used in min_t(). Large unsigned values (>= 0x80000000) become negative, causing unsigned wraparound and oversized memcpy operations that can overflow the stack buffer. Change min_t(int, ...) to min() as both values are unsigned and can be handled by min() without explicit cast.

CVSS v3.1 Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploit Prediction

0.0015

Probability of exploitation

0.05%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/2821bf2b79e47f87e1dbdd9d25c78240965a97d6 https://git.kernel.org/stable/c/45cb105b8642c65e9be286f7058e92314efe7ea3 https://git.kernel.org/stable/c/4788556d4dd9d717037e385de178974e9649231d https://git.kernel.org/stable/c/d9faef564438d1e4579c692c046603e7ada7bdf4 https://access.redhat.com/security/cve/CVE-2026-53202 https://bugzilla.redhat.com/show_bug.cgi?id=2492823 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53202.json

Frequently Asked Questions

What is CVE-2026-53202? +

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix signed integer truncation in IPC receive Fix potential buffer overflow where firmware-supplied data_size is cast to signed int before being used in min_t(). Large unsigned values (>= 0x80000000) become negative, causing unsigned wraparound and oversized memcpy operations that can overflow the stack buffer. Change min_t(int, ...) to min() as both values are unsigned and can be handled by min() without explicit cast. It has a CVSS v3.1 base score of 7.8 (HIGH).

How severe is CVE-2026-53202? +

CVE-2026-53202 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0015, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-53202? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.