CVE-2026-53159

Katalog CVE

CVSS 5.5 · Medium EPSS 0,13%

Kerentanan pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix DMA address corruption due to find_vma misuse fastrpc_get_args() uses find_vma() to look up the VMA for a user-provided pointer and compute a DMA address offset. When the address falls in a gap before the returned VMA, (ptr & PAGE_MASK) - vma->vm_start underflows, corrupting the DMA address sent to the DSP. Replace find_vma() with vma_lookup(), which returns NULL when the address is not contained within any VMA.

Rincian

Terbit di NVD

25 Juni 2026

Terakhir diubah

18 Juli 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

0,13% peluang dieksploitasi; lebih tinggi dari 2,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/2d0f47e27c1fa718b29c69aa7c96a2c5161bc2c2 patch
• https://git.kernel.org/stable/c/464c6ad2aa16e1e1df9d559289199356493d1e00 patch
• https://git.kernel.org/stable/c/53e06f8a3c2b085c31bf1284e2ebcb8036e99625 patch
• https://git.kernel.org/stable/c/708c17b52c60fe7a57e73b495bdee50f58feb48c patch
• https://git.kernel.org/stable/c/7ba7b30ddb04646d4d638f4d8c4718a304bbbddd patch
• https://git.kernel.org/stable/c/d3e26df2e8eb361e6bef096b2fd565476a1f14c4 patch
• https://git.kernel.org/stable/c/d43afc412d439ffca1567e7ca8652be22f272b3b patch
• https://git.kernel.org/stable/c/e69e306a4cccb40a73511350cb280825a556ce3c patch