---
id: CVE-2026-53206
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  accel/ivpu: Add bounds check for firmware runtime memory

  Validate that the firmware runtime memory specified in the image
  header is properly aligned and sized to hold …
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  accel/ivpu: Add bounds check for firmware runtime memory

  Validate that the firmware runtime memory specified in the image
  header is properly aligned and sized to hold …
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 6.19, < 7.0.13'
  - linux_kernel = 7.1
patched:
  - linux_kernel 7.0.13
published: '2026-06-25'
updated: '2026-07-02'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-53206'
references:
  - url: 'https://git.kernel.org/stable/c/1d0b597facdd3c0239c88e8797c1014e1ea0ef15'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/f8ab60ae9309e76d9a09c601c10cc222e25b3d5b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53206.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-53206'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2492802'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-53206'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-53206'
  - url: >-
      https://lore.kernel.org/linux-cve-announce/2026062501-CVE-2026-53206-c32f@gregkh/T
tags:
  - nvd
  - csaf
  - vex
  - red-hat
epss: 0.00143
epssPercentile: 0.03599
ingestedAt: '2026-07-03T13:02:28.025Z'
cwe:
  - CWE-787
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

accel/ivpu: Add bounds check for firmware runtime memory

Validate that the firmware runtime memory specified in the image
header is properly aligned and sized to hold the firmware image.
This prevents errors during memory allocation and image transfer.

## Affected

- `linux_kernel >= 6.19, < 7.0.13`
- `linux_kernel = 7.1`

## Remediation

Upgrade past the affected range:

- `linux_kernel 7.0.13`

## Vendor advisories

- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 9 · updated 2026-10-23 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53206.json)