SB20260626146 - Stack-based buffer overflow in Linux kernel accel ivpu driver

Description

This security bulletin contains information about 1 vulnerability.

1) Stack-based buffer overflow (CVE-ID: CVE-2026-53202)

CWE-ID: CWE-121 - Stack-based buffer overflow

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to a stack-based buffer overflow in the ivpu_ipc_receive function when processing firmware-supplied IPC message data. A local user can supply a crafted data_size value to trigger an oversized memcpy operation and execute arbitrary code.

Exploitation requires control over firmware-supplied message data.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/2821bf2b79e47f87e1dbdd9d25c78240965a97d6
• https://git.kernel.org/stable/c/45cb105b8642c65e9be286f7058e92314efe7ea3
• https://git.kernel.org/stable/c/4788556d4dd9d717037e385de178974e9649231d
• https://git.kernel.org/stable/c/d9faef564438d1e4579c692c046603e7ada7bdf4