CVE-2026-53387
HIGHiio: light: veml6075: add bounds check to veml6075_it_ms index
Title source: cnaDescription
In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6075: add bounds check to veml6075_it_ms index veml6075_it_ms has 5 elements but VEML6075_CONF_IT can yield values 0-7. If it returns a value >= 5, this causes an out-of-bounds array access. Add a bounds check and return -EINVAL if the index is out of range. The problem values are reserved so should never be read from the register. Hence this is hardening against fault device, missprogramming or bus corruption.
References (5)
Core 5
Core References
Scores
CVSS v3
7.1
EPSS
0.0013
EPSS Percentile
2.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Details
CWE
CWE-129
Status
published
Products (27)
linux/Kernel
< 6.12.95linux
linux/Kernel
6.13.0 - 6.18.37linux
linux/Kernel
6.19.0 - 7.0.14linux
linux/Kernel
6.8.0 - 6.12.95linux
linux/Kernel
7.1.0 - 7.1.2linux
Linux/Linux
< 6.12.95
Linux/Linux
< 6.18.37
Linux/Linux
< 6.8
Linux/Linux
< 7.0.14
Linux/Linux
< 7.1.2
... and 17 more
Published
Jul 19, 2026
Tracked Since
Jul 19, 2026