Linux Kernel CVE-2026-53044

The affected component is the Tegra Control Backbone (CBB) error-handling driver in the Linux kernel SoC subsystem (drivers/soc/tegra), specific to NVIDIA Tegra ARM-based SoCs. The CBB is the on-chip interconnect fabric that routes transactions between masters (CPU clusters, GPU, peripherals) and targets (memory, registers); when a transaction times out or errors, the driver consults static fabric lookup tables to decode and report the offending target. The root cause is an incorrect ARRAY_SIZE usage when iterating/indexing these lookup tables - the bounds check is computed against the wrong array, so a timeout lookup can index past the end of the table. While the CWE is listed as N/A by the source, this is a classic out-of-bounds access (CWE-125 out-of-bounds read, the input tags also label it 'Buffer Overflow'); the high-confidentiality/high-availability, no-integrity CVSS profile is consistent with an OOB read that leaks adjacent kernel memory and/or faults.