Vulnerability in Linux

CVE-2026-53387

In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6075: add bounds check to veml6075_it_ms index veml6075_it_ms has 5 elements but VEML6075_CONF_IT can yield values 0-7. If it returns a value >= 5, this causes an out-of-bounds array access. Add a bounds check and return -EINVAL if the index is out of range. The problem values are reserved so should never be read from the register. Hence this is hardening against fault device, missprogramming or bus corruption.

EPSS: 0.002 (6.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H.

Affected products

  • Linux — versions 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, 7.2-rc1, 3b82f43238aecd73464aeacc9c73407079511533
  • Linux Linux_kernel

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-53387?
CVE-2026-53387 is a high-severity vulnerability in Linux, classified under Improper Validation of Array Index. CVSS score: 7.1/10. Published 2026-07-19.
How severe is CVE-2026-53387?
High severity. CVSS v3 base score is 7.1 out of 10.