CVE-2026-53387

HIGH

iio: light: veml6075: add bounds check to veml6075_it_ms index

Title source: cna
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6075: add bounds check to veml6075_it_ms index veml6075_it_ms has 5 elements but VEML6075_CONF_IT can yield values 0-7. If it returns a value >= 5, this causes an out-of-bounds array access. Add a bounds check and return -EINVAL if the index is out of range. The problem values are reserved so should never be read from the register. Hence this is hardening against fault device, missprogramming or bus corruption.

Scores

CVSS v3 7.1
EPSS 0.0013
EPSS Percentile 2.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Details

CWE
CWE-129
Status published
Products (27)
linux/Kernel < 6.12.95linux
linux/Kernel 6.13.0 - 6.18.37linux
linux/Kernel 6.19.0 - 7.0.14linux
linux/Kernel 6.8.0 - 6.12.95linux
linux/Kernel 7.1.0 - 7.1.2linux
Linux/Linux < 6.12.95
Linux/Linux < 6.18.37
Linux/Linux < 6.8
Linux/Linux < 7.0.14
Linux/Linux < 7.1.2
... and 17 more
Published Jul 19, 2026
Tracked Since Jul 19, 2026