Skip to main content

Linux Kernel CVE-2026-53206

| EUVDEUVD-2026-39297 MEDIUM
2026-06-25 416baaa9-dc9f-4396-8d5f-8c081fb06d67 GHSA-365f-xm5m-p3pr
Information Disclosure Linux Red Hat Suse
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
5.5 MEDIUM

Local access and low privilege required to reach VPU device; impact is availability-only DoS via kernel error with no confidentiality or integrity effect.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
4.4 MEDIUM
AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Red Hat
5.5 MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

5
Analysis Generated
Jul 02, 2026 - 23:16 vuln.today
CVSS changed
Jul 02, 2026 - 21:07 NVD
5.5 (MEDIUM)
Patch available
Jun 25, 2026 - 10:32 EUVD
CVE Published
Jun 25, 2026 - 09:16 cve.org
UNKNOWN (no severity yet)
CVE Published
Jun 25, 2026 - 09:16 nvd
MEDIUM 5.5

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

accel/ivpu: Add bounds check for firmware runtime memory

Validate that the firmware runtime memory specified in the image header is properly aligned and sized to hold the firmware image. This prevents errors during memory allocation and image transfer.

AnalysisAI

Missing bounds validation in the Linux kernel's accel/ivpu Intel VPU accelerator driver allows a local low-privileged user on an affected Intel VPU-equipped system to trigger kernel memory allocation errors or a denial of service by supplying a malformed firmware image header specifying improperly aligned or undersized runtime memory. Affected versions include Linux 6.19 and 7.1-rc1 through rc6; fixed commits are available for both the 7.0.x stable series and the 7.1 branch. No public exploit identified at time of analysis; EPSS is 0.16% (6th percentile), and no CISA KEV listing exists, reflecting minimal real-world exploitation interest.

Technical ContextAI

The accel/ivpu subsystem (drivers/accel/ivpu) provides Linux kernel support for Intel's integrated Vision Processing Unit (VPU) found in Intel Meteor Lake and Lunar Lake SoCs. During driver initialization, the kernel loads a firmware image from disk and parses its header to configure runtime memory regions before performing DMA-based image transfer. The defect is the absence of validation confirming that the firmware runtime memory region declared in the image header is both correctly aligned and of sufficient size to hold the firmware blob. Without this check, mismatched header values can propagate into memory allocation and transfer routines, causing kernel errors. Although CWE is not assigned in the advisory, this maps most closely to CWE-20 (Improper Input Validation) or CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer). Affected CPE is cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*, with specific affected releases enumerated in EUVD data as Linux 6.19 and 7.1-rc1 through rc6.

RemediationAI

The primary remediation is to upgrade to Linux kernel 7.0.13 or later for the stable 7.0.x series, or to Linux 7.1 once the final release is available incorporating commit 1d0b597facdd3c0239c88e8797c1014e1ea0ef15. Patch commits are available directly from kernel.org stable at https://git.kernel.org/stable/c/f8ab60ae9309e76d9a09c601c10cc222e25b3d5b (7.0.x) and https://git.kernel.org/stable/c/1d0b597facdd3c0239c88e8797c1014e1ea0ef15 (7.1). Distribution maintainers (Debian, Ubuntu, RHEL, SUSE, etc.) should be monitored for backport status to their supported kernel series. As a compensating control where VPU functionality is not required, the intel_vpu kernel module can be blacklisted by adding 'blacklist intel_vpu' to /etc/modprobe.d/ivpu-blacklist.conf and rebuilding the initramfs; this disables NPU/VPU acceleration capabilities and will break AI/ML workloads that depend on the VPU. Restricting access to /dev/accel/* device nodes to trusted groups reduces the exposure surface for multi-user systems without fully disabling hardware access.

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Not-Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Not-Affected

Share

CVE-2026-53206 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy