CVE-2026-53356

Published: Jul 1, 2026Modified: Oct 19, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)

Description

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix phys BO pread/pwrite with offset sg_page() returns struct page pointer not (void *) so the scaling of pread/pwrite is wrong for phys BO and wrong parts of BO would be accessed if non-zero offset is used. Last impacted platform with overlay or cursor planes using phys mapping was Gen3/945G/Lakeport. (cherry picked from commit 3e49a2f85070b2fb672c1e0fdba281a4ea3aebe6)

Affected (14)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	5.11 ≤ version < 5.15.210
Linux Linux Kernel	5.16 ≤ version < 6.1.176
Linux Linux Kernel	5.7 ≤ version < 5.10.259
Linux Linux Kernel	6.13 ≤ version < 6.18.36
Linux Linux Kernel	6.19 ≤ version < 7.0.13
Linux Linux Kernel	6.2 ≤ version < 6.6.143
Linux Linux Kernel	6.7 ≤ version < 6.12.94
Linux Linux Kernel	Version 7.1 rc1
Linux Linux Kernel	Version 7.1 rc2
Linux Linux Kernel	Version 7.1 rc3
Linux Linux Kernel	Version 7.1 rc4
Linux Linux Kernel	Version 7.1 rc5
Linux Linux Kernel	Version 7.1 rc6
Linux Linux Kernel	Version 7.1 rc7