CVE Database›Document archive›CVE-2026-53044

CVE-2026-53044

kernel: soc/tegra: cbb: Fix incorrect ARRAY_SIZE in fabric lookup tables

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · June 24, 2026

Updated · November 2, 2026

Description

A flaw was found in the Linux kernel. An out-of-bounds access vulnerability exists in the soc/tegra: cbb fabric lookup tables due to incorrect array size usage. This issue could allow a local attacker to cause a denial of service (DoS) or potentially lead to information disclosure.

Statement

Red Hat has evaluated this issue as having a Moderate severity impact because successful exploitation requires local authenticated access and is strictly limited to deployments running on specialized NVIDIA Tegra hardware. Standard enterprise server platforms are unaffected as they do not load or utilize this SoC-specific fabric interconnect driver. On affected Tegra-based environments, a local unprivileged user could trigger target timeout lookups to cause a system crash or read out-of-bounds kernel memory.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-131 · Incorrect Calculation of Buffer Size