In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix signed integer truncation in IPC receive Fix potential buffer overflow where firmware-supplied data_size is cast to signed int before being used in min_t(). Large unsigned values (>= 0x80000000) become negative, causing unsigned wraparound and oversized memcpy operations that can overflow the stack buffer. Change min_t(int, ...) to min() as both values are unsigned and can be handled by min() without explicit cast.

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - accel/ivpu: Fix signed integer truncation in IPC receive Fix potential buffer overflow where firmware-     supplied data_size is cast to signed int before being used in min_t(). Large unsigned values (>=     0x80000000) become negative, causing unsigned wraparound and oversized memcpy operations that can overflow     the stack buffer. Change min_t(int, ...) to min() as both values are unsigned and can be handled by min()     without explicit cast. (CVE-2026-53202)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
333762	Photon OS 5.0: Linux PHSA-2026-5.0-92-0895	Nessus	PhotonOS Local Security Checks	high
329149	SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3166-1)	Nessus	SuSE Local Security Checks	medium
323382	Linux Distros Unpatched Vulnerability : CVE-2026-53202	Nessus	Misc.	high
322944	Photon OS 5.0: Linux PHSA-2026-5.0-0895	Nessus	PhotonOS Local Security Checks	high

Detections

Analytics

CVE-2026-53202

high

Tenable Plugins

high

medium

high

high