CVE-2026-53205

A flaw was found in the Linux kernel's Intel Versatile Processing Unit (IVPU) accelerator driver. This vulnerability occurs due to insufficient validation of read and write indices in the firmware log buffer. If the firmware provides invalid log indices, it could lead to out-of-bounds buffer access. This issue could potentially allow an attacker to cause a denial of service or disclose sensitive information.

An out of bounds read in the Intel ivpu firmware log path may occur because firmware supplied read_index and write_index values are used as offsets into the log data buffer without sufficient bounds validation. If a faulty or malicious firmware instance places read_index or write_index outside data_size, fw_log_print_buffer can calculate invalid ranges and read past the firmware log buffer while printing diagnostic output. For the CVSS the PR:L is used for the paranoid score because triggering requires local access to the ivpu device or diagnostic path and influence over firmware log activity, but not necessarily full host administrator privileges in all deployments. The issue is not network reachable. Impact is mainly denial of service via invalid memory access, with limited confidentiality risk if adjacent memory is exposed through the log output.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.