CVE-2026-53387 Details
Description
In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6075: add bounds check to veml6075_it_ms index veml6075_it_ms has 5 elements but VEML6075_CONF_IT can yield values 0-7. If it returns a value >= 5, this causes an out-of-bounds array access. Add a bounds check and return -EINVAL if the index is out of range. The problem values are reserved so should never be read from the register. Hence this is hardening against fault device, missprogramming or bus corruption.
A vulnerability in the Linux kernel's VEML6075 light sensor driver can lead to out-of-bounds array access. The issue arises because the VEML6075_CONF_IT register can return values that exceed the valid range, causing the driver to read reserved values that should never be accessed. This vulnerability has been addressed by adding a bounds check to ensure the index remains within the appropriate range, thereby preventing potential errors from faulty devices or bus corruption.
Users can update to the latest version of the Linux kernel, where this vulnerability has been fixed. Instructions for downloading the patched version are available on the official Linux kernel website.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0a89002737ee34decc20fa232204dbe5fe83e0de | kernel.org | Patch |
| https://git.kernel.org/stable/c/307dc4240bd41852d9e0912921e298160db1c109 | kernel.org | Patch |
| https://git.kernel.org/stable/c/df9127a1d2d748e426c49c8fcd9b6801e4eb743d | kernel.org | Patch |
| https://git.kernel.org/stable/c/e545936e06f1c7173ab41a5f33a77ff43ced3a8d | kernel.org | Patch |
| https://git.kernel.org/stable/c/f75beebcd5bc9bdc80e0722142e78a6f306214ee | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-129 | Improper Validation of Array Index | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.8, < 6.12.95 >= 6.13, < 6.18.37 >= 6.19, < 7.0.14 >= 7.1, < 7.1.2 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 17, 2026 | CVE Modified | kernel.org |
| Jul 29, 2026 | Initial Analysis | [email protected] |
| Jul 20, 2026 | CVE Modified | kernel.org |
| Jul 20, 2026 | CVE Modified | kernel.org |
| Jul 19, 2026 | New CVE Received | kernel.org |