What is CVE-2026-53196?

CVE-2026-53196 is a Medium severity Linux kernel vulnerability with a CVSS score of 6.8 out of 10, classified as a Out-of-bounds Write flaw (CWE-787), affecting Linux kernel versions from 2.6.12 onward and patched in 5.10.259, 5.15.210, 6.1.176 and others. CVE-2026-53196 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-53196?

CVE-2026-53196 has a CVSS score of 6.8 out of 10, rated Medium severity. The vector string is CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Is there a patch available for CVE-2026-53196?

Yes, CVE-2026-53196 has been patched. Fixed versions include 5.10.259, 5.15.210, 6.1.176 and others. If you are running Linux kernel 2.6.12 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2026-53196 actively exploited?

CVE-2026-53196 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is Out-of-bounds Write (CWE-787)?

The product writes data past the end or before the beginning of the intended buffer. See MITRE CWE for full details: https://cwe.mitre.org/data/definitions/787.html

CVE-2026-53196

Medium

In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in get_manuf_info() get_manuf_info() reads le16_to_cpu(rom_desc->Size) bytes from the device I2C EEPROM into a buffer allocated with kmalloc_obj(), which is sizeof(struct edge_ti_manuf_descriptor) = 10 bytes. The Size field comes from the device and is only validated (in check_i2c_image()) to make sure the descriptor fits within TI_MAX_I2C_SIZE (16384 bytes), not against the destination buffer size. A malicious USB device can therefore set Size to any value up to 16377, causing a heap overflow of up to 16367 bytes when plugged into a host running this driver. valid_csum() is called after read_rom() and also iterates buffer[0..Size-1], compounding the out-of-bounds access. Fix by rejecting descriptors with unexpected length before calling read_rom(). [ johan: amend commit message; also check for short descriptors ]

Package Linux Kernel

Published 2026-06-25

Last modified 2026-07-15

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

6.8

out of 10

Medium

Attack Vector

Physical

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Vector string

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness type

CWE-787

CVE-2026-53196 is a Out-of-bounds Write vulnerability

What is Out-of-bounds Write?

The product writes data past the end or before the beginning of the intended buffer. Learn more on MITRE CWE

Affected versions

Linux kernel versions 2.6.12 and later are affected. Fixed in 5.10.259, 5.15.210, 6.1.176, 6.6.143, 6.12.94, 6.18.36, 7.0.13, 7.1 and their respective stable series.

Affected from

≥ 2.6.12

Fixed in

✓ 5.10.259 5.10.x ✓ 5.15.210 5.15.x ✓ 6.1.176 6.1.x ✓ 6.6.143 6.6.x ✓ 6.12.94 6.12.x ✓ 6.18.36 6.18.x ✓ 7.0.13 7.0.x ✓ 7.1

References

11 total

Kernel Git
https://git.kernel.org/stable/c/183c1076eca43bbb3e7bdf597456f91d81c73e74

Patch
Kernel Git
https://git.kernel.org/stable/c/561edb021486e6723d841926aa4b48097da06190

Patch
Kernel Git
https://git.kernel.org/stable/c/b849f30d1a9e66aae6b715aaef66e427390cb081

Patch
Kernel Git
https://git.kernel.org/stable/c/cfd634f6dfd40c49a84f9bddc2867a80e2e2623a

Patch
Kernel Git
https://git.kernel.org/stable/c/d214d2341d4f9f447e36a7d012cdf6a6631a55f1

Patch

Showing 5 of 11 references View all on NVD

Details

CVE ID CVE-2026-53196

Severity Medium

CVSS score 6.8 / 10

CVSS version 3.1

Published 2026-06-25

Modified 2026-07-15

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2026-53196?

CVE-2026-53196 is a Medium severity Linux kernel vulnerability with a CVSS score of 6.8 out of 10 , classified as an Out-of-bounds Write flaw (CWE-787) . It affects Linux kernel versions from 2.6.12 onward and has been patched in 5.10.259, 5.15.210, 6.1.176 and others. CVE-2026-53196 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2026-53196?

CVE-2026-53196 has a CVSS score of 6.8 out of 10, rated Medium severity (CVSS 3.1). The vector string is CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Is there a patch available for CVE-2026-53196?

Yes. CVE-2026-53196 has been patched. Fixed versions include 5.10.259, 5.15.210, 6.1.176 and others. If you are running Linux kernel 2.6.12 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2026-53196 actively exploited?

No. CVE-2026-53196 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.