CVE-2026-53203

A flaw was found in the Linux kernel's accel/ivpu component. This vulnerability, a buffer overflow, occurs when the firmware returns a size larger than the allocated buffer during a metric stream information query. This can lead to an incorrect buffer copy, potentially causing system instability or denial of service.

This vulnerability is rated as an Important severity flaw because an authenticated local user with access to the accelerator device interface can corrupt kernel memory via a heap buffer overflow, risking complete host compromise or denial of service. Exploitation requires environments equipped with Intel Versatile Processing Unit (VPU/NPU) hardware where the corresponding kernel driver is active. Deployments without compatible acceleration hardware or without access granted to the accelerator character device node remain unaffected by this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.