CVE-2026-53347

Katalog CVE

CVSS 5.5 · Medium EPSS 0,12%

Kerentanan Use of Uninitialized Resource pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix driver removal with disabled KMS DRM atomic and modesetting aren't initialized if virtio-gpu driver built with disabled KMS, leading to access of uninitialized data on driver removal/unbinding and crashing kernel. Fix it by skipping shutting down atomic core with unavailable KMS.

Rincian

Terbit di NVD

1 Juli 2026

Terakhir diubah

22 Juli 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-908: Use of Uninitialized Resource

EPSS (30 hari)

0,12% peluang dieksploitasi; lebih tinggi dari 1,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/15e561869a8b4e4db69733be1d6f33770664f989 patch
• https://git.kernel.org/stable/c/19a6a00ff50c284f3a9818882ad2be58b33b790a patch
• https://git.kernel.org/stable/c/38a5f891cda6d121c149c94cda89c31ec7024ee3 patch
• https://git.kernel.org/stable/c/ed3e134700a2e07caa99b9bc0683ebbe0327c562 patch
• https://git.kernel.org/stable/c/f329e8325e054bd6d84d10904f8dd51137281b92 patch