NVD

CVE-2026-53203 Detail

Description

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add buffer overflow check in MS get_info_ioctl Add validation that the info size returned from the metric stream info query is not exceeded when checked against the allocated buffer size. If the firmware returns a size larger than the buffer, reject the operation with -EOVERFLOW instead of proceeding with an incorrect buffer copy.

Metrics

NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.

CVSS 4.0 Severity and Vector Strings:

NIST: NVD

N/A

NVD assessment not yet provided.

CVSS 3.x Severity and Vector Strings:

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

Nist CVSS score does not match with CNA score

CNA: kernel.org

Base Score: 7.1 HIGH

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

ADP: redhat-SADP

Base Score: 7.0 HIGH

Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0 Severity and Vector Strings:

National Institute of Standards and Technology

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL	Source(s)	Tag(s)
https://access.redhat.com/security/cve/CVE-2026-53203	redhat-SADP	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2492798	redhat-SADP	Third Party Advisory
https://git.kernel.org/stable/c/4e5047cc94bea1cc7b670b7f503358e9af0542df	kernel.org	Patch
https://git.kernel.org/stable/c/d3c12ed33e8923f3090909a1738f3e59292996a6	kernel.org	Patch
https://git.kernel.org/stable/c/fa598556ecef412edcb391f144b7642e18fdfd45	kernel.org	Patch
https://git.kernel.org/stable/c/fb176425837693f50c5c9fc8db6fbb04af22bd0a	kernel.org	Patch
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53203.json	redhat-SADP	Third Party Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-787	Out-of-bounds Write	NIST
CWE-120	Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')	redhat-SADP

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Denotes Vulnerable Software
Are we missing a CPE here? Please let us know.

Change History

5 change records found show changes

CVE Modified by redhat-SADP 7/14/2026 9:16:31 PM

Action

Type

Old Value

New Value

Changed

Affected

[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","defaultStatus":"unaffected","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"unaffected","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","cpes":["cpe:/o:redhat:enterprise_linux:8"]}]

[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel-rt","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel-rt","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel-rt","cpes":["cpe:/o:redhat:enterprise_linux:9"]}]

Initial Analysis by NIST 7/02/2026 4:56:31 PM

Action	Type	New Value
Added	CWE	CWE-787
Added	CPE Configuration	OR cpe:2.3:o:linux:linux_kernel:7.1:rc1::::::* cpe:2.3:o:linux:linux_kernel:7.1:rc2::::::* cpe:2.3:o:linux:linux_kernel:7.1:rc3::::::* cpe:2.3:o:linux:linux_kernel:7.1:rc4::::::* cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 6.13 up to (excluding) 6.18.36 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 6.19 up to (excluding) 7.0.13 cpe:2.3:o:linux:linux_kernel:7.1:rc5::::::* cpe:2.3:o:linux:linux_kernel:7.1:rc6::::::* cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 6.11 up to (excluding) 6.12.94
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/4e5047cc94bea1cc7b670b7f503358e9af0542df Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/d3c12ed33e8923f3090909a1738f3e59292996a6 Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/fa598556ecef412edcb391f144b7642e18fdfd45 Types: Patch
Added	Reference Type	kernel.org: https://git.kernel.org/stable/c/fb176425837693f50c5c9fc8db6fbb04af22bd0a Types: Patch
Added	Reference Type	redhat-SADP: https://access.redhat.com/security/cve/CVE-2026-53203 Types: Third Party Advisory
Added	Reference Type	redhat-SADP: https://bugzilla.redhat.com/show_bug.cgi?id=2492798 Types: Third Party Advisory
Added	Reference Type	redhat-SADP: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53203.json Types: Third Party Advisory

CVE Modified by redhat-SADP 6/29/2026 11:20:57 PM

Action	Type	New Value
Added	CVSS V3.1	AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Added	CWE	CWE-120
Added	Reference	https://access.redhat.com/security/cve/CVE-2026-53203
Added	Reference	https://bugzilla.redhat.com/show_bug.cgi?id=2492798
Added	Reference	https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53203.json
Added	Affected	[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","defaultStatus":"unaffected","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"unaffected","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","cpes":["cpe:/o:redhat:enterprise_linux:8"]}]

New CVE Received from kernel.org 6/25/2026 5:16:37 AM

Action	Type	New Value
Added	Description	In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add buffer overflow check in MS get_info_ioctl Add validation that the info size returned from the metric stream info query is not exceeded when checked against the allocated buffer size. If the firmware returns a size larger than the buffer, reject the operation with -EOVERFLOW instead of proceeding with an incorrect buffer copy.
Added	Reference	https://git.kernel.org/stable/c/4e5047cc94bea1cc7b670b7f503358e9af0542df
Added	Reference	https://git.kernel.org/stable/c/d3c12ed33e8923f3090909a1738f3e59292996a6
Added	Reference	https://git.kernel.org/stable/c/fa598556ecef412edcb391f144b7642e18fdfd45
Added	Reference	https://git.kernel.org/stable/c/fb176425837693f50c5c9fc8db6fbb04af22bd0a
Added	Affected	[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/accel/ivpu/ivpu_ms.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"cdfad4db7756563db7d458216d9e3c2651dddc7d","lessThan":"d3c12ed33e8923f3090909a1738f3e59292996a6","versionType":"git","status":"affected"},{"version":"cdfad4db7756563db7d458216d9e3c2651dddc7d","lessThan":"fa598556ecef412edcb391f144b7642e18fdfd45","versionType":"git","status":"affected"},{"version":"cdfad4db7756563db7d458216d9e3c2651dddc7d","lessThan":"4e5047cc94bea1cc7b670b7f503358e9af0542df","versionType":"git","status":"affected"},{"version":"cdfad4db7756563db7d458216d9e3c2651dddc7d","lessThan":"fb176425837693f50c5c9fc8db6fbb04af22bd0a","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/accel/ivpu/ivpu_ms.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"6.11","status":"affected"},{"version":"0","lessThan":"6.11","versionType":"semver","status":"unaffected"},{"version":"6.12.94","lessThanOrEqual":"6.12.","versionType":"semver","status":"unaffected"},{"version":"6.18.36","lessThanOrEqual":"6.18.","versionType":"semver","status":"unaffected"},{"version":"7.0.13","lessThanOrEqual":"7.0.","versionType":"semver","status":"unaffected"},{"version":"7.1","lessThanOrEqual":"","versionType":"original_commit_for_fix","status":"unaffected"}]}]

Quick Info

CVE Dictionary Entry:
CVE-2026-53203
NVD Published Date:
06/25/2026
NVD Last Modified:
07/14/2026
Source:
kernel.org

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

National Vulnerability Database

National Vulnerability Database

CVE-2026-53203 Detail

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Change History

CVE Modified by redhat-SADP 7/14/2026 9:16:31 PM

Initial Analysis by NIST 7/02/2026 4:56:31 PM

CVE Modified by redhat-SADP 6/29/2026 11:20:57 PM

CVE Modified by kernel.org 6/28/2026 4:16:38 AM

New CVE Received from kernel.org 6/25/2026 5:16:37 AM

Quick Info