CVE-2026-53206

A flaw was found in the Linux kernel. A local user can cause a Denial of Service (DoS) due to missing bounds and alignment checks on firmware runtime memory in the Intel Versatile Processing Unit (accel/ivpu) driver. Improper validation of memory parameters specified in the firmware image header can cause memory allocation failures during device initialization, leading to a system crash.

This vulnerability is rated as Moderate severity because it requires local system access and specifically depends on systems with integrated Intel VPU hardware acceleration. On Red Hat Enterprise Linux, the issue arises when handling runtime memory parameters during device firmware initialization, which can cause memory allocation failures and trigger a kernel denial of service. Standard server environments lacking specialized Intel neural processing hardware remain unaffected by this flaw under default configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.