{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-53356", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-06-09T07:44:35.400Z", "datePublished": "2026-07-01T13:32:31.428Z", "dateUpdated": "2026-07-18T07:33:24.602Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-07-18T07:33:24.602Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/gem: Fix phys BO pread/pwrite with offset\n\nsg_page() returns struct page pointer not (void *) so the scaling\nof pread/pwrite is wrong for phys BO and wrong parts of BO would be\naccessed if non-zero offset is used.\n\nLast impacted platform with overlay or cursor planes using phys\nmapping was Gen3/945G/Lakeport.\n\n(cherry picked from commit 3e49a2f85070b2fb672c1e0fdba281a4ea3aebe6)"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/i915/gem/i915_gem_phys.c"], "versions": [{"version": "c6790dc22312f592c1434577258b31c48c72d52a", "lessThan": "40f738991058eb3e3530c3006a5bd6fd5e29f035", "status": "affected", "versionType": "git"}, {"version": "c6790dc22312f592c1434577258b31c48c72d52a", "lessThan": "1ec8fc63e9cdb22da54e48e536c9204020416fc6", "status": "affected", "versionType": "git"}, {"version": "c6790dc22312f592c1434577258b31c48c72d52a", "lessThan": "14469860e2e39b7095dcd658d2bad38a11110a68", "status": "affected", "versionType": "git"}, {"version": "c6790dc22312f592c1434577258b31c48c72d52a", "lessThan": "07c33be968d9e0cab6cba38c81850a09942fcb2e", "status": "affected", "versionType": "git"}, {"version": "c6790dc22312f592c1434577258b31c48c72d52a", "lessThan": "3bd168dd835b93a3862cd05b0d13c432b115f9d6", "status": "affected", "versionType": "git"}, {"version": "c6790dc22312f592c1434577258b31c48c72d52a", "lessThan": "32d4c5d328a3ff995420f4f85163e1e403f43628", "status": "affected", "versionType": "git"}, {"version": "c6790dc22312f592c1434577258b31c48c72d52a", "lessThan": "dd51a2eeb93bc6faa892ff9083911dd23f82c187", "status": "affected", "versionType": "git"}, {"version": "c6790dc22312f592c1434577258b31c48c72d52a", "lessThan": "d21ad938398bca695a511307de38a65889e3b354", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/i915/gem/i915_gem_phys.c"], "versions": [{"version": "5.7", "status": "affected"}, {"version": "0", "lessThan": "5.7", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.259", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.210", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.176", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.143", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.94", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.36", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.13", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.7", "versionEndExcluding": "5.10.259"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.7", "versionEndExcluding": "5.15.210"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.7", "versionEndExcluding": "6.1.176"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.7", "versionEndExcluding": "6.6.143"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.7", "versionEndExcluding": "6.12.94"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.7", "versionEndExcluding": "6.18.36"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.7", "versionEndExcluding": "7.0.13"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.7", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/40f738991058eb3e3530c3006a5bd6fd5e29f035"}, {"url": "https://git.kernel.org/stable/c/1ec8fc63e9cdb22da54e48e536c9204020416fc6"}, {"url": "https://git.kernel.org/stable/c/14469860e2e39b7095dcd658d2bad38a11110a68"}, {"url": "https://git.kernel.org/stable/c/07c33be968d9e0cab6cba38c81850a09942fcb2e"}, {"url": "https://git.kernel.org/stable/c/3bd168dd835b93a3862cd05b0d13c432b115f9d6"}, {"url": "https://git.kernel.org/stable/c/32d4c5d328a3ff995420f4f85163e1e403f43628"}, {"url": "https://git.kernel.org/stable/c/dd51a2eeb93bc6faa892ff9083911dd23f82c187"}, {"url": "https://git.kernel.org/stable/c/d21ad938398bca695a511307de38a65889e3b354"}], "title": "drm/i915/gem: Fix phys BO pread/pwrite with offset", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{}

{"bugzilla": {"description": "kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset", "id": "2495950", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495950"}, "csaw": false, "cwe": "CWE-823", "details": ["A flaw was found in the Linux kernel's `drm/i915/gem` component. This vulnerability occurs because the `sg_page()` function incorrectly scales `pread/pwrite` operations for physical Buffer Objects (BO) when a non-zero offset is used. This can lead to incorrect memory access, potentially allowing an attacker to read or write to unintended memory regions. Such access could result in information disclosure or data corruption."], "name": "CVE-2026-53356", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-07-01T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-53356\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-53356\nhttps://lore.kernel.org/linux-cve-announce/2026070147-CVE-2026-53356-0d5f@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c6790dc22312f592c1434577258b31c48c72d52a,40f738991058eb3e3530c3006a5bd6fd5e29f035)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c6790dc22312f592c1434577258b31c48c72d52a,1ec8fc63e9cdb22da54e48e536c9204020416fc6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c6790dc22312f592c1434577258b31c48c72d52a,14469860e2e39b7095dcd658d2bad38a11110a68)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c6790dc22312f592c1434577258b31c48c72d52a,07c33be968d9e0cab6cba38c81850a09942fcb2e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c6790dc22312f592c1434577258b31c48c72d52a,3bd168dd835b93a3862cd05b0d13c432b115f9d6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c6790dc22312f592c1434577258b31c48c72d52a,32d4c5d328a3ff995420f4f85163e1e403f43628)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c6790dc22312f592c1434577258b31c48c72d52a,dd51a2eeb93bc6faa892ff9083911dd23f82c187)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c6790dc22312f592c1434577258b31c48c72d52a,d21ad938398bca695a511307de38a65889e3b354)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.7"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,5.7)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.10.259,5.11.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.210,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.176,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.143,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.94,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.36,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0.13,7.1.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-07-01T15:00:06.692782+00:00", "updated": "2026-07-25T22:30:05.058436+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}