CVE-2026-53205: accel/ivpu: Add bounds checks for firmware log indices
In the Linux kernel, the following vulnerability has been resolved:
accel/ivpu: Add bounds checks for firmware log indices
Add validation that read and write indices in the firmware log buffer are within valid bounds (< datasize) before using them. If out-of-bounds indices are encountered (from firmware), clamp them to safe values instead of proceeding with invalid offsets.
This prevents potential out-of-bounds buffer access when firmware supplies invalid log indices.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel (accel/ivpu)to a version that resolves this vulnerability.Patch accel/ivpu: Add bounds checks for firmware log indices
Event History
Frequently Asked Questions
What level of access is required to exploit this issue?
The vulnerability is rated as locally exploitable and requires low privileges. No user interaction is required.
What systems are relevant to this vulnerability?
The affected area is the Linux kernel accel/ivpu component, specifically its handling of firmware log-buffer indices. Systems not using this component are not indicated by the provided data as being exposed.
What is the potential security impact?
The supplied severity vector indicates high confidentiality and availability impact, with no integrity impact. Invalid firmware-provided indices could otherwise lead to an out-of-bounds buffer access.