What is the CVSS score of CVE-2026-53386?

CVE-2026-53386 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Linux Kernel are affected by CVE-2026-53386?

The Linux kernel's TI ADS1298 biopotential sensor driver contains an out-of-bounds read vulnerability (CVSS 7.8) affecting organizations that deploy TI ADS1298-based medical monitoring systems.. A patch is available.

How to fix or mitigate CVE-2026-53386?

Within 24 hours, inventory systems running the ti-ads1298 driver to determine exposure scope, particularly those in clinical or medical monitoring roles. Within 7 days, apply the vendor-released patch available per Linux kernel security advisory to remediate the out-of-bounds read vulnerability. Within 30 days, validate patch deployment across all affected systems and confirm that the vulnerability cannot be triggered through configuration of channel PGA settings.

Linux Kernel CVE-2026-53386

EUVD-2026-45508 HIGH

Improper Validation of Array Index (CWE-129)

2026-07-19 Linux

GHSA-7hpj-6664-9jjw

Buffer Overflow Linux

7.8

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

3.6 LOW

Local and requires reserved-value hardware state (AC:H, PR:L); a single-element out-of-bounds read gives minor info leak (C:L) and possible instability (A:L), with no write so I:N.

3.1 AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L

4.0 AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N

SUSE

HIGH

qualitative

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 20, 2026 - 18:05 vuln.today

CVSS changed

Jul 20, 2026 - 15:22 NVD

7.8 (HIGH)

Patch available

Jul 19, 2026 - 14:17 EUVD

CVE Published

Jul 19, 2026 - 11:59 cve.org

UNKNOWN (no severity yet)

CVE Published

Jul 19, 2026 - 11:59 cve.org

HIGH 7.8

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: ti-ads1298: add bounds check to pga_settings index

ads1298_pga_settings has 7 elements but ADS1298_MASK_CH_PGA can yield values 0-7. If it yields a value >= 7, this causes an out-of-bounds array access. Add a bounds check and return -EINVAL if the index is out of range.

Note that the remaining value b111 is reserved so should not be seen in a correctly functioning system.

AnalysisAI

Out-of-bounds array read in the Linux kernel's TI ADS1298 IIO ADC driver (ti-ads1298) lets a local, low-privileged actor read past the 7-element ads1298_pga_settings table when a channel's PGA field decodes to the reserved value 7 (0b111). Affected are systems running the ti-ads1298 driver against a TI ADS1298 biopotential/ECG analog front end; the upstream fix adds a bounds check that returns -EINVAL. There is no public exploit identified at time of analysis and EPSS is low (0.17%, 6th percentile), consistent with a niche, hardware-dependent code path rather than a broadly weaponizable flaw.

Technical ContextAI

The ADS1298 is a Texas Instruments 8-channel, 24-bit delta-sigma ADC front end used in ECG/EEG and biopotential acquisition; Linux exposes it through the Industrial I/O (IIO) subsystem via the drivers/iio/adc/ti-ads1298 driver. Each channel has a programmable-gain amplifier (PGA) whose gain is looked up from a static ads1298_pga_settings array indexed by the value masked from the channel register with ADS1298_MASK_CH_PGA. That mask is 3 bits wide and can yield 0-7, but the table defines only 7 entries (indices 0-6), so an index of 7 reads one element beyond the array. The vendor-supplied CWE is N/A, but the intelligence tags this as Buffer Overflow; more precisely it is an out-of-bounds read (CWE-125 class) - a classic missing bounds check on a hardware-influenced index. Value 7 is documented as reserved and 'should not be seen in a correctly functioning system,' so the path is normally unreachable.

RemediationAI

Apply the Linux stable update containing the bounds check: Vendor-released patch: 6.12.95, 6.18.37, 7.0.14, or 7.1.2 (mainline 7.2-rc1), matching your kernel branch; the fix validates the PGA index and returns -EINVAL when it is out of range. See the fixing commits at https://git.kernel.org/stable/c/d5793975fc3b1780ba576812158ef22e3104e60e and https://git.kernel.org/stable/c/95e8a48d7a85d4226934020e57815a3316d3a14b. If you cannot patch immediately, the highest-value compensating control is to not load the driver where it is unneeded - blacklist the ti-ads1298 kernel module, whose only side effect is losing support for that specific ADC, which fully removes the vulnerable code path. Where the hardware is required, restrict local and physical access to the device and its sysfs IIO interfaces so untrusted users cannot influence device state, accepting that this limits legitimate local tooling that reads those channels.

Same weakness CWE-129 – Improper Validation of Array Index

View all

CVE-2016-9053 CRITICAL POC

9.8

CVE-2020-27485 CRITICAL POC

9.9

CVE-2020-27483 CRITICAL POC

9.9

CVE-2024-24563 CRITICAL POC

9.8

CVE-2017-8797 HIGH

7.5

CVE-2018-11489 HIGH POC

8.8

CVE-2026-56770 HIGH POC

8.7

CVE-2017-7228 HIGH POC

8.2

Same technique Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2020-0796 CRITICAL POC

10.0

CVE-2019-11043 CRITICAL POC

9.8

CVE-2009-0927 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Important

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0	Affected

CVE-2026-53386 vulnerability details – vuln.today

Back

Linux Kernel CVE-2026-53386

Severity by source

CVSS VectorVendor: Linux

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Same weakness CWE-129 – Improper Validation of Array Index

Same technique Buffer Overflow

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code