What is the CVSS score of CVE-2026-53387?

CVE-2026-53387 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H. EPSS exploitation probability: 0.2%.

Which versions of Linux Kernel are affected by CVE-2026-53387?

The Linux kernel's VEML6075 UV light sensor driver contains an out-of-bounds read vulnerability affecting systems with this hardware component.. A patch is available.

How to fix or mitigate CVE-2026-53387?

Within 24 hours, audit inventory to identify systems running Linux kernels with VEML6075 IIO driver support and confirm which devices have this specific hardware installed. Within 7 days, obtain the patched kernel version from your Linux distribution and test it in a staging environment to validate sensor functionality and system stability. Within 30 days, deploy the patched kernel to all production systems with VEML6075 hardware, prioritizing edge and IoT platforms; coordinate with device manufacturers if kernel updates are bundled with firmware releases.

Linux Kernel CVE-2026-53387

EUVD-2026-45509 HIGH

Improper Validation of Array Index (CWE-129)

2026-07-19 Linux

GHSA-83px-8fr4-3c85

Buffer Overflow Linux

7.1

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

7.1 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

vuln.today AI

3.6 LOW

Local read access (AV:L/PR:L); AC:H because triggering needs an abnormal reserved register state not attacker-controlled; small OOB read gives C:L and possible fault A:L, no integrity impact.

3.1 AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L

4.0 AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N

SUSE

3.3 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Red Hat

MEDIUM

qualitative

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 20, 2026 - 18:06 vuln.today

CVSS changed

Jul 20, 2026 - 15:22 NVD

7.1 (HIGH)

Patch available

Jul 19, 2026 - 14:17 EUVD

CVE Published

Jul 19, 2026 - 11:59 cve.org

UNKNOWN (no severity yet)

CVE Published

Jul 19, 2026 - 11:59 cve.org

HIGH 7.1

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

iio: light: veml6075: add bounds check to veml6075_it_ms index

veml6075_it_ms has 5 elements but VEML6075_CONF_IT can yield values 0-7. If it returns a value >= 5, this causes an out-of-bounds array access. Add a bounds check and return -EINVAL if the index is out of range.

The problem values are reserved so should never be read from the register. Hence this is hardening against fault device, missprogramming or bus corruption.

AnalysisAI

Out-of-bounds array read in the Linux kernel's IIO veml6075 UV light sensor driver allows a local low-privileged user reading the sensor's integration-time data to trigger access past the 5-element veml6075_it_ms lookup table. The VEML6075_CONF_IT register field can decode to index values 0-7, but only indices 0-4 are valid; a reserved value (5-7) drives the driver to read beyond the array. This is a hardening fix against faulty hardware, device misprogramming, or bus corruption rather than a directly attacker-controllable memory-corruption primitive; no public exploit identified at time of analysis and EPSS risk is low (0.17%, 6th percentile).

Technical ContextAI

The affected component is drivers/iio/light/veml6075.c, the Industrial I/O (IIO) driver for the Vishay VEML6075 UVA/UVB light sensor exposed to userspace through IIO sysfs and character-device interfaces. The driver maps the 3-bit integration-time (IT) field of the VEML6075 configuration register to a millisecond value using the veml6075_it_ms[] array, which holds only 5 entries. Because a 3-bit field encodes 8 possible values (0-7), a register value in the reserved range 5-7 selects an index with no corresponding array element, producing a classic out-of-bounds read (CWE-125, related to the 'Buffer Overflow' tag supplied). The upstream fix adds a bounds check that returns -EINVAL when the decoded index is out of range. CPE data lists only cpe:2.3:a:linux:linux and the supplied CWE is N/A; the underlying weakness class is an out-of-bounds read on an unvalidated hardware-supplied index.

RemediationAI

Vendor-released patch: update to a fixed stable kernel - 7.1.2, 7.0.14, 6.18.37, or 6.12.95 (fix also in 7.2-rc1) - via the stable-tree commits (https://git.kernel.org/stable/c/f75beebcd5bc9bdc80e0722142e78a6f306214ee, /307dc4240bd41852d9e0912921e298160db1c109, /df9127a1d2d748e426c49c8fcd9b6801e4eb743d, /0a89002737ee34decc20fa232204dbe5fe83e0de, /e545936e06f1c7173ab41a5f33a77ff43ced3a8d) and rebuild/redeploy; prefer your distribution's next kernel update over a manual backport where possible. If patching must be deferred, a targeted compensating control is to unload or blacklist the veml6075 module (blacklist veml6075 in modprobe.d) on systems that do not use this UV sensor, which fully removes the code path at the cost of losing that sensor's readings; where the sensor is required, restrict userspace read access to its IIO sysfs/char-device nodes to trusted processes, accepting that legitimate sensor consumers must be re-authorized. Given the abnormal-register precondition, these controls are low priority relative to routine kernel patching.

Same weakness CWE-129 – Improper Validation of Array Index

View all

CVE-2016-9053 CRITICAL POC

9.8

CVE-2020-27485 CRITICAL POC

9.9

CVE-2020-27483 CRITICAL POC

9.9

CVE-2024-24563 CRITICAL POC

9.8

CVE-2017-8797 HIGH

7.5

CVE-2018-11489 HIGH POC

8.8

CVE-2026-56770 HIGH POC

8.7

CVE-2017-7228 HIGH POC

8.2

Same technique Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2020-0796 CRITICAL POC

10.0

CVE-2019-11043 CRITICAL POC

9.8

CVE-2009-0927 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0	Not-Affected

CVE-2026-53387 vulnerability details – vuln.today

Back

Linux Kernel CVE-2026-53387

Severity by source

CVSS VectorVendor: Linux

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Same weakness CWE-129 – Improper Validation of Array Index

Same technique Buffer Overflow

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code