CVE-2026-53205
Description
A flaw was found in the Linux kernel's Intel Versatile Processing Unit (IVPU) accelerator driver. This vulnerability occurs due to insufficient validation of read and write indices in the firmware log buffer. If the firmware provides invalid log indices, it could lead to out-of-bounds buffer access. This issue could potentially allow an attacker to cause a denial of service or disclose sensitive information.
Statement
An out of bounds read in the Intel ivpu firmware log path may occur because firmware supplied read_index and write_index values are used as offsets into the log data buffer without sufficient bounds validation. If a faulty or malicious firmware instance places read_index or write_index outside data_size, fw_log_print_buffer can calculate invalid ranges and read past the firmware log buffer while printing diagnostic output. For the CVSS the PR:L is used for the paranoid score because triggering requires local access to the ivpu device or diagnostic path and influence over firmware log activity, but not necessarily full host administrator privileges in all deployments. The issue is not network reachable. Impact is mainly denial of service via invalid memory access, with limited confidentiality risk if adjacent memory is exposed through the log output.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 6.1 | N/A | 7.1 |
| Attack Vector | Local | N/A | Local |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | Low | N/A | Low |
| User Interaction | None | N/A | None |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | Low | N/A | High |
| Integrity Impact | None | N/A | None |
| Availability Impact | High | N/A | High |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
cve.org: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
