CVE-2026-53356

Published: Jul 1, 2026Modified: Jul 22, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)

Description

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix phys BO pread/pwrite with offset sg_page() returns struct page pointer not (void *) so the scaling of pread/pwrite is wrong for phys BO and wrong parts of BO would be accessed if non-zero offset is used. Last impacted platform with overlay or cursor planes using phys mapping was Gen3/945G/Lakeport. (cherry picked from commit 3e49a2f85070b2fb672c1e0fdba281a4ea3aebe6)

Affected (14)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 5.11 to 5.15.210
Linux Linux Kernel	From 5.16 to 6.1.176
Linux Linux Kernel	From 5.7 to 5.10.259
Linux Linux Kernel	From 6.13 to 6.18.36
Linux Linux Kernel	From 6.19 to 7.0.13
Linux Linux Kernel	From 6.2 to 6.6.143
Linux Linux Kernel	From 6.7 to 6.12.94
Linux Linux Kernel	Version 7.1 rc1
Linux Linux Kernel	Version 7.1 rc2
Linux Linux Kernel	Version 7.1 rc3
Linux Linux Kernel	Version 7.1 rc4
Linux Linux Kernel	Version 7.1 rc5
Linux Linux Kernel	Version 7.1 rc6
Linux Linux Kernel	Version 7.1 rc7