CVE-2026-53376

MediumCVSS 5.5/10Last modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Add upper bound check for num_of_nodes

drm/amdkfd: Add upper bound check for num_of_nodes in kfd_ioctl_get_process_apertures_new.

(cherry picked from commit 98ff46a5ea090c14d2cdb4f5b993b05d74f3949f)

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= c7bcbfa4f8d1e0e1078adfe959d4b65542bccf66, < f0f19e614cdd7d9cff2fb280cf923c99256d7915; >= c7bcbfa4f8d1e0e1078adfe959d4b65542bccf66, < 4a8093c7def141cc6e854fbe3f9693867982418f; >= c7bcbfa4f8d1e0e1078adfe959d4b65542bccf66, < 6ba6ec5fcbb0d03ca11ed1cc38d57a7deb6c6b20; >= c7bcbfa4f8d1e0e1078adfe959d4b65542bccf66, < 44d5a450c04d3d734c13a03561c3131020d66edf; >= c7bcbfa4f8d1e0e1078adfe959d4b65542bccf66, < 7b80137eb8aa9d1cbfe7ccf3eeb1faa94ae35d7e; >= c7bcbfa4f8d1e0e1078adfe959d4b65542bccf66, < 74b73fa56a395d46745e4f245225963e9f8be7f1
LinuxLinux4.17

References

Timeline

Published
Jul 19, 2026
Last modified
Nov 6, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-533775.5In the Linux kernel, the following vulnerability has been resolved: drm/msm: always recover the gpu Previously, in case there was no more CVE-2026-533785.5In the Linux kernel, the following vulnerability has been resolved: drm/colorop: Fix blob property reference tracking in state lifecycle TCVE-2026-533795.5In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov8856: free control handler on error in ov8856_init_controCVE-2026-53387.2A security vulnerability has been detected in Tenda G103 1.0.0.5. The affected element is the function action_set_system_settings of the filCVE-2026-533807.8In the Linux kernel, the following vulnerability has been resolved: media: rzv2h-ivc: Fix concurrent buffer list access The list of bufferCVE-2026-533817.8In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix UAF on submount umount iput() called from fuse_release_eCVE-2026-533825.5In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si syzbotCVE-2026-533837.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject non-VALID session in compound request branch smb2_check_CVE-2026-533849.8In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails CVE-2026-533855.5In the Linux kernel, the following vulnerability has been resolved: vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_wCVE-2026-533867.8In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bounds check to pga_settings index ads1298_pCVE-2026-533877.1In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6075: add bounds check to veml6075_it_ms index veml607
CVE-2026-53376: Medium severity, CVSS 5.5 | Vulnix