CVE-2026-53356 drm/i915/gem: Fix phys BO pread/pwrite with offset
Incorrect memory access in the i915 driver allows reading or writing wrong buffer parts when using non-zero offsets.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-53356?
CVE-2026-53356 is a high-severity vulnerability in Linux kernel, published on 1 Jul 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/i915/gem: Fix phys BO pread/pwrite with offset
sg_page() returns struct page pointer not (void *) so the scaling of pread/pwrite is wrong for phys BO and wrong parts of BO would be accessed if non-zero offset is used.
Last impacted platform with overlay or cursor planes using phys mapping was Gen3/945G/Lakeport.
(cherry picked from commit 3e49a2f85070b2fb672c1e0fdba281a4ea3aebe6)
Weakness: CWE-1164
Which versions are affected by CVE-2026-53356?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-53356?
Apply the vendor's patch.
Is CVE-2026-53356 being exploited?
There is no known exploitation of CVE-2026-53356 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2026-53356, DEBIAN-CVE-2026-53356, GHSA-v877-m38r-6c5w, ROOT-OS-UBUNTU-2204-CVE-2026-53356, ROOT-OS-UBUNTU-2404-CVE-2026-53356, UBUNTU-CVE-2026-53356.