What is CVE-2026-53356?

CVE-2026-53356 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10, affecting Linux kernel versions from 5.7 onward and patched in 5.10.259, 5.15.210, 6.1.176 and others. CVE-2026-53356 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-53356?

CVE-2026-53356 has a CVSS score of 7.8 out of 10, rated High severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Is there a patch available for CVE-2026-53356?

Yes, CVE-2026-53356 has been patched. Fixed versions include 5.10.259, 5.15.210, 6.1.176 and others. If you are running Linux kernel 5.7 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2026-53356 actively exploited?

CVE-2026-53356 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-53356

High

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix phys BO pread/pwrite with offset sg_page() returns struct page pointer not (void *) so the scaling of pread/pwrite is wrong for phys BO and wrong parts of BO would be accessed if non-zero offset is used. Last impacted platform with overlay or cursor planes using phys mapping was Gen3/945G/Lakeport. (cherry picked from commit 3e49a2f85070b2fb672c1e0fdba281a4ea3aebe6)

Package Linux Kernel

Published 2026-07-01

Last modified 2026-07-22

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

7.8

out of 10

High

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected versions

Linux kernel versions 5.7 and later are affected. Fixed in 5.10.259, 5.15.210, 6.1.176, 6.6.143, 6.12.94, 6.18.36, 7.0.13, 7.1 and their respective stable series.

Affected from

≥ 5.7

Fixed in

✓ 5.10.259 5.10.x ✓ 5.15.210 5.15.x ✓ 6.1.176 6.1.x ✓ 6.6.143 6.6.x ✓ 6.12.94 6.12.x ✓ 6.18.36 6.18.x ✓ 7.0.13 7.0.x ✓ 7.1

References

8 total

Kernel Git
https://git.kernel.org/stable/c/07c33be968d9e0cab6cba38c81850a09942fcb2e

Patch
Kernel Git
https://git.kernel.org/stable/c/14469860e2e39b7095dcd658d2bad38a11110a68

Patch
Kernel Git
https://git.kernel.org/stable/c/1ec8fc63e9cdb22da54e48e536c9204020416fc6

Patch
Kernel Git
https://git.kernel.org/stable/c/32d4c5d328a3ff995420f4f85163e1e403f43628

Patch
Kernel Git
https://git.kernel.org/stable/c/3bd168dd835b93a3862cd05b0d13c432b115f9d6

Patch

Showing 5 of 8 references View all on NVD

Details

CVE ID CVE-2026-53356

Severity High

CVSS score 7.8 / 10

CVSS version 3.1

Published 2026-07-01

Modified 2026-07-22

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2026-53356?

CVE-2026-53356 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10 . It affects Linux kernel versions from 5.7 onward and has been patched in 5.10.259, 5.15.210, 6.1.176 and others. CVE-2026-53356 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2026-53356?

CVE-2026-53356 has a CVSS score of 7.8 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Is there a patch available for CVE-2026-53356?

Yes. CVE-2026-53356 has been patched. Fixed versions include 5.10.259, 5.15.210, 6.1.176 and others. If you are running Linux kernel 5.7 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2026-53356 actively exploited?

No. CVE-2026-53356 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.