{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-53375", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-06-09T07:44:35.401Z", "datePublished": "2026-07-19T10:01:58.898Z", "dateUpdated": "2026-07-20T13:39:44.889Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-07-20T13:39:44.889Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/vce: Prevent partial address patches\n\nIn the case that only one of lo/hi is valid, the patching could result\nin a bad address written to in FW."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH"}}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c"], "versions": [{"version": "d38ceaf99ed015f2a0b9af3499791bd3a3daae21", "lessThan": "2d66d1f5d8c0434e9a5ad21cc6eaf3a5e32141d5", "status": "affected", "versionType": "git"}, {"version": "d38ceaf99ed015f2a0b9af3499791bd3a3daae21", "lessThan": "944db9cfa5373f67eb94621d4c2eee572c05fa3f", "status": "affected", "versionType": "git"}, {"version": "d38ceaf99ed015f2a0b9af3499791bd3a3daae21", "lessThan": "0ee17150763962671f43a62ddf8f6ea1feaff438", "status": "affected", "versionType": "git"}, {"version": "d38ceaf99ed015f2a0b9af3499791bd3a3daae21", "lessThan": "b3d1a0a45c4aec484fa2a5b060b611e3d3064470", "status": "affected", "versionType": "git"}, {"version": "d38ceaf99ed015f2a0b9af3499791bd3a3daae21", "lessThan": "ea2c554e700b86a04534b4c24ece5844e8c5f07e", "status": "affected", "versionType": "git"}, {"version": "d38ceaf99ed015f2a0b9af3499791bd3a3daae21", "lessThan": "de2a02cc28d6d5d37db07d00a9a684c754a5fd74", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c"], "versions": [{"version": "4.2", "status": "affected"}, {"version": "0", "lessThan": "4.2", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.175", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.140", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.90", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.32", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.9", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "6.1.175"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "6.6.140"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "6.12.90"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "6.18.32"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "7.0.9"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.2", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/2d66d1f5d8c0434e9a5ad21cc6eaf3a5e32141d5"}, {"url": "https://git.kernel.org/stable/c/944db9cfa5373f67eb94621d4c2eee572c05fa3f"}, {"url": "https://git.kernel.org/stable/c/0ee17150763962671f43a62ddf8f6ea1feaff438"}, {"url": "https://git.kernel.org/stable/c/b3d1a0a45c4aec484fa2a5b060b611e3d3064470"}, {"url": "https://git.kernel.org/stable/c/ea2c554e700b86a04534b4c24ece5844e8c5f07e"}, {"url": "https://git.kernel.org/stable/c/de2a02cc28d6d5d37db07d00a9a684c754a5fd74"}], "title": "drm/amdgpu/vce: Prevent partial address patches", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{}

{"bugzilla": {"description": "kernel: drm/amdgpu/vce: Prevent partial address patches", "id": "2502190", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502190"}, "csaw": false, "cwe": "CWE-787", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ndrm/amdgpu/vce: Prevent partial address patches\nIn the case that only one of lo/hi is valid, the patching could result\nin a bad address written to in FW.", "A flaw was found in the Linux kernel, specifically within the drm/amdgpu/vce component responsible for video encoding. This vulnerability arises when the system attempts to update a memory address using incomplete information, where only a portion of the address is valid. This can result in data being written to an unintended memory location in the firmware, which could allow an attacker to execute unauthorized code or disrupt system operations."], "name": "CVE-2026-53375", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Not affected", "impact": "important", "package_name": "erlang27", "product_name": "Red Hat Hardened Images"}], "public_date": "2026-07-19T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-53375\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-53375\nhttps://lore.kernel.org/linux-cve-announce/2026071946-CVE-2026-53375-58f4@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d38ceaf99ed015f2a0b9af3499791bd3a3daae21,2d66d1f5d8c0434e9a5ad21cc6eaf3a5e32141d5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d38ceaf99ed015f2a0b9af3499791bd3a3daae21,944db9cfa5373f67eb94621d4c2eee572c05fa3f)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d38ceaf99ed015f2a0b9af3499791bd3a3daae21,0ee17150763962671f43a62ddf8f6ea1feaff438)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d38ceaf99ed015f2a0b9af3499791bd3a3daae21,b3d1a0a45c4aec484fa2a5b060b611e3d3064470)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d38ceaf99ed015f2a0b9af3499791bd3a3daae21,ea2c554e700b86a04534b4c24ece5844e8c5f07e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d38ceaf99ed015f2a0b9af3499791bd3a3daae21,de2a02cc28d6d5d37db07d00a9a684c754a5fd74)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.2"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,4.2)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.175,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.140,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.90,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.32,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0.9,7.1.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-07-21T02:30:17.338125+00:00", "updated": "2026-07-21T02:30:17.338160+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}