Riskcovery

CVE-2026-53387

iio: light: veml6075: add bounds check to veml6075_it_ms index

State
Published
Severity
7.1 High
Published
Jul 19, 2026
Updated
Aug 17, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: light: veml6075: add bounds check to veml6075_it_ms index

veml6075_it_ms has 5 elements but VEML6075_CONF_IT can yield values 0-7. If it returns a value >= 5, this causes an out-of-bounds array access. Add a bounds check and return -EINVAL if the index is out of range.

The problem values are reserved so should never be read from the register. Hence this is hardening against fault device, missprogramming or bus corruption.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3b82f43238aecd73464aeacc9c73407079511533 to before df9127a1d2d748e426c49c8fcd9b6801e4eb743dAffected
  • 3b82f43238aecd73464aeacc9c73407079511533 to before 0a89002737ee34decc20fa232204dbe5fe83e0deAffected
  • 3b82f43238aecd73464aeacc9c73407079511533 to before f75beebcd5bc9bdc80e0722142e78a6f306214eeAffected
  • 3b82f43238aecd73464aeacc9c73407079511533 to before e545936e06f1c7173ab41a5f33a77ff43ced3a8dAffected
  • 3b82f43238aecd73464aeacc9c73407079511533 to before 307dc4240bd41852d9e0912921e298160db1c109Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.12.95 through 6.12.*Not affected
  • 6.18.37 through 6.18.*Not affected
  • 7.0.14 through 7.0.*Not affected
  • 7.1.2 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.