{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-53387", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-06-09T07:44:35.402Z", "datePublished": "2026-07-19T11:59:33.888Z", "dateUpdated": "2026-07-20T13:39:50.863Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-07-20T13:39:50.863Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: light: veml6075: add bounds check to veml6075_it_ms index\n\nveml6075_it_ms has 5 elements but VEML6075_CONF_IT can yield values 0-7.\nIf it returns a value >= 5, this causes an out-of-bounds array access.\nAdd a bounds check and return -EINVAL if the index is out of range.\n\nThe problem values are reserved so should never be read from the\nregister. Hence this is hardening against fault device, missprogramming\nor bus corruption."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "baseScore": 7.1, "baseSeverity": "HIGH"}}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iio/light/veml6075.c"], "versions": [{"version": "3b82f43238aecd73464aeacc9c73407079511533", "lessThan": "df9127a1d2d748e426c49c8fcd9b6801e4eb743d", "status": "affected", "versionType": "git"}, {"version": "3b82f43238aecd73464aeacc9c73407079511533", "lessThan": "0a89002737ee34decc20fa232204dbe5fe83e0de", "status": "affected", "versionType": "git"}, {"version": "3b82f43238aecd73464aeacc9c73407079511533", "lessThan": "f75beebcd5bc9bdc80e0722142e78a6f306214ee", "status": "affected", "versionType": "git"}, {"version": "3b82f43238aecd73464aeacc9c73407079511533", "lessThan": "e545936e06f1c7173ab41a5f33a77ff43ced3a8d", "status": "affected", "versionType": "git"}, {"version": "3b82f43238aecd73464aeacc9c73407079511533", "lessThan": "307dc4240bd41852d9e0912921e298160db1c109", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iio/light/veml6075.c"], "versions": [{"version": "6.8", "status": "affected"}, {"version": "0", "lessThan": "6.8", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.95", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.37", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.14", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.2", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8", "versionEndExcluding": "6.12.95"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8", "versionEndExcluding": "6.18.37"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8", "versionEndExcluding": "7.0.14"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8", "versionEndExcluding": "7.1.2"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8", "versionEndExcluding": "7.2-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/df9127a1d2d748e426c49c8fcd9b6801e4eb743d"}, {"url": "https://git.kernel.org/stable/c/0a89002737ee34decc20fa232204dbe5fe83e0de"}, {"url": "https://git.kernel.org/stable/c/f75beebcd5bc9bdc80e0722142e78a6f306214ee"}, {"url": "https://git.kernel.org/stable/c/e545936e06f1c7173ab41a5f33a77ff43ced3a8d"}, {"url": "https://git.kernel.org/stable/c/307dc4240bd41852d9e0912921e298160db1c109"}], "title": "iio: light: veml6075: add bounds check to veml6075_it_ms index", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{}

{"bugzilla": {"description": "kernel: iio: light: veml6075: add bounds check to veml6075_it_ms index", "id": "2502244", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502244"}, "csaw": false, "cwe": "CWE-787", "details": ["In the Linux kernel, the following vulnerability has been resolved:\niio: light: veml6075: add bounds check to veml6075_it_ms index\nveml6075_it_ms has 5 elements but VEML6075_CONF_IT can yield values 0-7.\nIf it returns a value >= 5, this causes an out-of-bounds array access.\nAdd a bounds check and return -EINVAL if the index is out of range.\nThe problem values are reserved so should never be read from the\nregister. Hence this is hardening against fault device, missprogramming\nor bus corruption.", "A flaw was found in the Linux kernel's `veml6075` light sensor driver. The driver performs an out-of-bounds array access when processing certain index values from the `VEML6075_CONF_IT` register. This issue could potentially lead to system instability or a denial of service if triggered by a faulty device, misprogramming, or bus corruption."], "name": "CVE-2026-53387", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-07-19T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-53387\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-53387\nhttps://lore.kernel.org/linux-cve-announce/2026071935-CVE-2026-53387-700e@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3b82f43238aecd73464aeacc9c73407079511533,df9127a1d2d748e426c49c8fcd9b6801e4eb743d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3b82f43238aecd73464aeacc9c73407079511533,0a89002737ee34decc20fa232204dbe5fe83e0de)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3b82f43238aecd73464aeacc9c73407079511533,f75beebcd5bc9bdc80e0722142e78a6f306214ee)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3b82f43238aecd73464aeacc9c73407079511533,e545936e06f1c7173ab41a5f33a77ff43ced3a8d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3b82f43238aecd73464aeacc9c73407079511533,307dc4240bd41852d9e0912921e298160db1c109)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.8"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.8)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.95,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.37,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0.14,7.1.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.2,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-07-21T01:00:04.323141+00:00", "updated": "2026-07-21T01:00:04.323181+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}