CVE-2026-53202
CVE-2026-53202: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Red Hat
1 advisory- Advisory severityHigh7.3
High [CVE-2026-53202] Fix signed integer truncation in IPC receive
CVE-2026-53202Source published Source updated
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix signed integer truncation in IPC receive Fix potential buffer overflow where firmware-supplied data_size is cast to signed int before being used in min_t(). Large unsigned values (>= 0x80000000) become negative, causing unsigned wraparound and oversized memcpy operations that can overflow the stack buffer. Change min_t(int,...) to min() as both values are unsigned and can be handled by min() without explicit cast. A local attacker could exploit a signed integer truncation vulnerability in the Inter-Process Communication (IPC) receive path. This flaw occurs when a firmware-supplied data size is incorrectly converted, leading to an oversized memory copy operation that can overflow a kernel stack buffer.…
- Affected products in this advisory
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- Red Hat package: kernel-rt
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- kernel-0:6.12.0-211.47.1.el10_2
- kernel-0:5.14.0-687.39.1.el9_8
- RHSA-2026:54343
- RHSA-2026:54443
- Mitigation guidance
- If the Intel Versatile Processing Unit (IVPU) accelerator is not required, the `ivpu` kernel module can be blacklisted to prevent it from loading, thereby mitigating this vulnerability. To blacklist the module, create a file named `/etc/modprobe.d/blacklist-ivpu.conf` with the following content: ``` blacklist ivpu ``` After creating the file, regenerate the initramfs and reboot the system for the changes to take effect. This may impact functionality if the IVPU accelerator is actively used.
Android app · Google Play
Monitor future Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.