exploitDog

CVE-2026-53356

Опубликовано: 01 июл. 2026

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

drm/i915/gem: Fix phys BO pread/pwrite with offset

sg_page() returns struct page pointer not (void *) so the scaling of pread/pwrite is wrong for phys BO and wrong parts of BO would be accessed if non-zero offset is used.

Last impacted platform with overlay or cursor planes using phys mapping was Gen3/945G/Lakeport.

(cherry picked from commit 3e49a2f85070b2fb672c1e0fdba281a4ea3aebe6)

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.7 (включая) до 5.10.259 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.11 (включая) до 5.15.210 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 6.1.176 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.6.143 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.7 (включая) до 6.12.94 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.13 (включая) до 6.18.36 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.19 (включая) до 7.0.13 (исключая)

cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.1:rc6:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.1:rc7:*:*:*:*:*:*

EPSS

Процентиль: 2%

0.0012

Низкий

7.8 High

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2026-53356

CVSS3: 7.8

ubuntu

около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix phys BO pread/pwrite with offset sg_page() returns struct page pointer not (void *) so the scaling of pread/pwrite is wrong for phys BO and wrong parts of BO would be accessed if non-zero offset is used. Last impacted platform with overlay or cursor planes using phys mapping was Gen3/945G/Lakeport. (cherry picked from commit 3e49a2f85070b2fb672c1e0fdba281a4ea3aebe6)

CVE-2026-53356

redhat

около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix phys BO pread/pwrite with offset sg_page() returns struct page pointer not (void *) so the scaling of pread/pwrite is wrong for phys BO and wrong parts of BO would be accessed if non-zero offset is used. Last impacted platform with overlay or cursor planes using phys mapping was Gen3/945G/Lakeport. (cherry picked from commit 3e49a2f85070b2fb672c1e0fdba281a4ea3aebe6)

CVE-2026-53356

CVSS3: 7.1

msrc

около 1 месяца назад

drm/i915/gem: Fix phys BO pread/pwrite with offset

CVE-2026-53356

CVSS3: 7.8

debian

около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: d ...

GHSA-v877-m38r-6c5w

CVSS3: 7.8

github

около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix phys BO pread/pwrite with offset sg_page() returns struct page pointer not (void *) so the scaling of pread/pwrite is wrong for phys BO and wrong parts of BO would be accessed if non-zero offset is used. Last impacted platform with overlay or cursor planes using phys mapping was Gen3/945G/Lakeport. (cherry picked from commit 3e49a2f85070b2fb672c1e0fdba281a4ea3aebe6)

EPSS

Процентиль: 2%

0.0012

Низкий

7.8 High

CVSS3

Дефекты

NVD-CWE-noinfo