What’s Vulnerable › Vulnerabilities

CVE-2026-53387: iio: light: veml6075: add bounds check to veml6075_it_ms index

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-19 · updated 2026-08-17
• Weakness: CWE-129

Description

In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6075: add bounds check to veml6075_it_ms index veml6075_it_ms has 5 elements but VEML6075_CONF_IT can yield values 0-7. If it returns a value >= 5, this causes an out-of-bounds array access. Add a bounds check and return -EINVAL if the index is out of range. The problem values are reserved so should never be read from the register. Hence this is hardening against fault device, missprogramming or bus corruption.

Affected products

• Linux kernel: from 6.8 before 6.12.95; from 6.13 before 6.18.37; from 6.19 before 7.0.14; from 7.1 before 7.1.2 — fixed in 6.12.95, 6.18.37, 7.0.14, 7.1.2

How to fix

Upgrade to a fixed version: Linux kernel 6.12.95, 6.18.37, 7.0.14, 7.1.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0a89002737ee34decc20fa232204dbe5fe83e0de
• https://git.kernel.org/stable/c/307dc4240bd41852d9e0912921e298160db1c109
• https://git.kernel.org/stable/c/df9127a1d2d748e426c49c8fcd9b6801e4eb743d
• https://git.kernel.org/stable/c/e545936e06f1c7173ab41a5f33a77ff43ced3a8d
• https://git.kernel.org/stable/c/f75beebcd5bc9bdc80e0722142e78a6f306214ee

Get alerted when CVE-2026-53387 or the next vulnerability affects your stack