PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2026-53195

CVE-2026-53195

kernel: USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()

Loading…

Severity

Moderate

Red Hat Product Security

7

CVSS 3.1

Review impact separately from score.

Published · June 25, 2026

Updated · July 6, 2026

Description

A flaw was found in the USB: serial: io_ti module of the Linux kernel. The build_i2c_fw_hdr() function allocates a fixed-size buffer but copies data into it without properly validating the input length from the firmware header. This oversight allows an attacker to provide a crafted firmware image, leading to a heap overflow. A successful exploit could result in arbitrary code execution or a denial of service (DoS) on the affected system.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')