CVEvulnerability
CVE-2026-53356
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2026-07-01
- Last modified
- 2026-10-19
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-1164
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/i915/gem: Fix phys BO pread/pwrite with offset
sg_page() returns struct page pointer not (void *) so the scaling
of pread/pwrite is wrong for phys BO and wrong parts of BO would be
accessed if non-zero offset is used.
Last impacted platform with overlay or cursor planes using phys
mapping was Gen3/945G/Lakeport.
(cherry picked from commit 3e49a2f85070b2fb672c1e0fdba281a4ea3aebe6)
Affected configurations
• linux linux kernel (>= 5.7 < 5.10.259)
• linux linux kernel (>= 5.11 < 5.15.210)
• linux linux kernel (>= 5.16 < 6.1.176)
• linux linux kernel (>= 6.2 < 6.6.143)
• linux linux kernel (>= 6.7 < 6.12.94)
• linux linux kernel (>= 6.13 < 6.18.36)
• linux linux kernel (>= 6.19 < 7.0.13)
• linux linux kernel 7.1
Related
Weakness · CWE (1)
- CWE-1164 Irrelevant Code weakness
References
- https://git.kernel.org/stable/c/07c33be968d9e0cab6cba38c81850a09942fcb2e Patch
- https://git.kernel.org/stable/c/14469860e2e39b7095dcd658d2bad38a11110a68 Patch
- https://git.kernel.org/stable/c/1ec8fc63e9cdb22da54e48e536c9204020416fc6 Patch
- https://git.kernel.org/stable/c/32d4c5d328a3ff995420f4f85163e1e403f43628 Patch
- https://git.kernel.org/stable/c/3bd168dd835b93a3862cd05b0d13c432b115f9d6 Patch
- https://git.kernel.org/stable/c/40f738991058eb3e3530c3006a5bd6fd5e29f035 Patch
- https://git.kernel.org/stable/c/d21ad938398bca695a511307de38a65889e3b354 Patch
- https://git.kernel.org/stable/c/dd51a2eeb93bc6faa892ff9083911dd23f82c187 Patch
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html cert-portal.siemens.com