What is CVE-2026-53387?

CVE-2026-53387 is a unscored severity Linux kernel vulnerability. CVE-2026-53387 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-53387?

CVE-2026-53387 has a CVSS score of pending NVD analysis out of 10, rated awaiting scoring severity.

Is there a patch available for CVE-2026-53387?

Yes, CVE-2026-53387 has been patched. Fixed versions include 6.12.95, 6.18.37, 7.0.14 and others.

Is CVE-2026-53387 actively exploited?

CVE-2026-53387 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-53387

In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6075: add bounds check to veml6075_it_ms index veml6075_it_ms has 5 elements but VEML6075_CONF_IT can yield values 0-7. If it returns a value >= 5, this causes an out-of-bounds array access. Add a bounds check and return -EINVAL if the index is out of range. The problem values are reserved so should never be read from the register. Hence this is hardening against fault device, missprogramming or bus corruption.

Package Linux Kernel

Published 2026-07-19

Last modified 2026-07-19

Patch available

Yes

Affected versions

Fixed in 6.12.95, 6.18.37, 7.0.14, 7.1.2, 7.2-rc1 and their respective stable series.

Fixed in

✓ 6.12.95 6.12.x ✓ 6.18.37 6.18.x ✓ 7.0.14 7.0.x ✓ 7.1.2 7.1.x ✓ 7.2-rc1

References

5 total

Frequently asked questions

What is CVE-2026-53387?

CVE-2026-53387 is a unscored severity Linux kernel vulnerability . CVE-2026-53387 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
Is there a patch available for CVE-2026-53387?

Yes — CVE-2026-53387 has been patched. Fixed versions include 6.12.95, 6.18.37, 7.0.14 and others.
Is CVE-2026-53387 actively exploited?

No — CVE-2026-53387 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.