CVE-2026-53356

A flaw was found in the Linux kernel's drm/i915/gem component. This vulnerability occurs because the sg_page() function incorrectly scales pread/pwrite operations for physical Buffer Objects (BO) when a non-zero offset is used. This can lead to incorrect memory access, potentially allowing an attacker to read or write to unintended memory regions. Such access could result in information disclosure or data corruption.

Red Hat rates this vulnerability as having an Important impact because a local authenticated user with access to the Direct Rendering Manager interface could trigger out-of-bounds memory operations, potentially compromising kernel memory integrity or causing a denial of service. However, practical exploitability is constrained because the flaw resides in physical buffer object routines only invoked on obsolete Intel graphics hardware architectures (such as Gen3/945G platforms). Modern enterprise installations supported by Red Hat typically utilize newer hardware platforms that do not execute this legacy code path.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.