{"id":"CVE-2026-53206","title":"In the Linux kernel, the following vulnerability has been resolved:\n\naccel/ivpu: Add bounds check for firmware runtime memory\n\nValidate that the firmware runtime memory specified in the image\nheader is properly aligned and sized to hold …","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\naccel/ivpu: Add bounds check for firmware runtime memory\n\nValidate that the firmware runtime memory specified in the image\nheader is properly aligned and sized to hold …","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 6.19, < 7.0.13","linux_kernel = 7.1"],"patched":["linux_kernel 7.0.13"],"published":"2026-06-25","updated":"2026-07-02","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-53206","references":[{"url":"https://git.kernel.org/stable/c/1d0b597facdd3c0239c88e8797c1014e1ea0ef15","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/f8ab60ae9309e76d9a09c601c10cc222e25b3d5b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53206.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-53206"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492802"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-53206"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53206"},{"url":"https://lore.kernel.org/linux-cve-announce/2026062501-CVE-2026-53206-c32f@gregkh/T"}],"tags":["nvd","csaf","vex","red-hat"],"epss":0.00143,"epssPercentile":0.03599,"ingestedAt":"2026-07-03T13:02:28.025Z","cwe":["CWE-787"],"slug":"CVE-2026-53206","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\naccel/ivpu: Add bounds check for firmware runtime memory\n\nValidate that the firmware runtime memory specified in the image\nheader is properly aligned and sized to hold the firmware image.\nThis prevents errors during memory allocation and image transfer.\n\n## Affected\n\n- `linux_kernel >= 6.19, < 7.0.13`\n- `linux_kernel = 7.1`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 7.0.13`\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 9 · updated 2026-10-23 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53206.json)","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}