CVE-2026-53044
kernel: soc/tegra: cbb: Fix incorrect ARRAY_SIZE in fabric lookup tables
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 24, 2026
Updated · November 2, 2026
Description
A flaw was found in the Linux kernel. An out-of-bounds access vulnerability exists in the soc/tegra: cbb fabric lookup tables due to incorrect array size usage. This issue could allow a local attacker to cause a denial of service (DoS) or potentially lead to information disclosure.
Statement
Red Hat has evaluated this issue as having a Moderate severity impact because successful exploitation requires local authenticated access and is strictly limited to deployments running on specialized NVIDIA Tegra hardware. Standard enterprise server platforms are unaffected as they do not load or utilize this SoC-specific fabric interconnect driver. On affected Tegra-based environments, a local unprivileged user could trigger target timeout lookups to cause a system crash or read out-of-bounds kernel memory.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-131 · Incorrect Calculation of Buffer Size