{"cve":{"cve_id":"CVE-2026-53195","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":null,"epss_percentile":null,"epss_as_of":null,"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()\n\nbuild_i2c_fw_hdr() allocates a fixed-size buffer of\n(16*1024 - 512) + sizeof(struct ti_i2c_firmware_rec) bytes, then\ncopies le16_to_cpu(img_header->Length) bytes into it without\nvalidating that Length fits within the available space after the\nfirmware record header.\n\nimg_header->Length is a __le16 from the firmware file and can be\nup to 65535. check_fw_sanity() validates the total firmware size\nbut not img_header->Length specifically.\n\nFix by rejecting images where img_header->Length exceeds the\navailable destination space.","published_at":"2026-06-25T08:39:05.673000Z","last_modified_at":null,"cvss_v3_score":null,"cvss_v3_vector":null,"cvss_v3_severity":null,"cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":null,"ssvc_automatable":null,"ssvc_technical_impact":null,"cwes":null,"nvd_references":["https://git.kernel.org/stable/c/3e187152f44d76d7633a3855ffd0099e1588b82a","https://git.kernel.org/stable/c/b7faf660eefa2047ebc2959ff76da2b6eae2e9e3","https://git.kernel.org/stable/c/2fd64bf0ad66ab5de0c73524591d879427ba5aba","https://git.kernel.org/stable/c/4cb722747ed25971f35cc47ce5c0e79d7f717713","https://git.kernel.org/stable/c/130d6567eb148040eed1b73e1414ad6c27d22bd5","https://git.kernel.org/stable/c/294692d3296eee3391c348d7ea6401916d27806c","https://git.kernel.org/stable/c/5a79b634ee58786ca627268daefa7744f2af2e14","https://git.kernel.org/stable/c/0fd2b00b2d3d05e3eaa13342b3dfb0fa85c226ae"],"vuln_status":null,"trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-28T17:55:28.590503Z","updated_at":"2026-06-28T23:30:51.545322Z"},"effective_severity":null,"badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":null,"metrics":[]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","version_start_inclusive":true,"version_end":"3e187152f44d76d7633a3855ffd0099e1588b82a","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:1da177e4c3f41524e886b7f1b8a0c1fc7321cac2:3e187152f44d76d7633a3855ffd0099e1588b82a"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","version_start_inclusive":true,"version_end":"b7faf660eefa2047ebc2959ff76da2b6eae2e9e3","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:1da177e4c3f41524e886b7f1b8a0c1fc7321cac2:b7faf660eefa2047ebc2959ff76da2b6eae2e9e3"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","version_start_inclusive":true,"version_end":"2fd64bf0ad66ab5de0c73524591d879427ba5aba","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:1da177e4c3f41524e886b7f1b8a0c1fc7321cac2:2fd64bf0ad66ab5de0c73524591d879427ba5aba"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","version_start_inclusive":true,"version_end":"4cb722747ed25971f35cc47ce5c0e79d7f717713","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:1da177e4c3f41524e886b7f1b8a0c1fc7321cac2:4cb722747ed25971f35cc47ce5c0e79d7f717713"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","version_start_inclusive":true,"version_end":"130d6567eb148040eed1b73e1414ad6c27d22bd5","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:1da177e4c3f41524e886b7f1b8a0c1fc7321cac2:130d6567eb148040eed1b73e1414ad6c27d22bd5"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","version_start_inclusive":true,"version_end":"294692d3296eee3391c348d7ea6401916d27806c","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:1da177e4c3f41524e886b7f1b8a0c1fc7321cac2:294692d3296eee3391c348d7ea6401916d27806c"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","version_start_inclusive":true,"version_end":"5a79b634ee58786ca627268daefa7744f2af2e14","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:1da177e4c3f41524e886b7f1b8a0c1fc7321cac2:5a79b634ee58786ca627268daefa7744f2af2e14"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","version_start_inclusive":true,"version_end":"0fd2b00b2d3d05e3eaa13342b3dfb0fa85c226ae","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:1da177e4c3f41524e886b7f1b8a0c1fc7321cac2:0fd2b00b2d3d05e3eaa13342b3dfb0fa85c226ae"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"2.6.12","version_start_inclusive":true,"version_end":"2.6.12","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:2.6.12:2.6.12"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"0","version_start_inclusive":true,"version_end":"2.6.12","version_end_inclusive":false,"cpe23_uri":"cve5:linux:linux:0:2.6.12"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"5.10.259","version_start_inclusive":true,"version_end":"5.10.*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:5.10.259:5.10.*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"5.15.210","version_start_inclusive":true,"version_end":"5.15.*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:5.15.210:5.15.*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"6.1.176","version_start_inclusive":true,"version_end":"6.1.*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:6.1.176:6.1.*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"6.6.143","version_start_inclusive":true,"version_end":"6.6.*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:6.6.143:6.6.*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"6.12.94","version_start_inclusive":true,"version_end":"6.12.*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:6.12.94:6.12.*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"6.18.36","version_start_inclusive":true,"version_end":"6.18.*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:6.18.36:6.18.*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"7.0.13","version_start_inclusive":true,"version_end":"7.0.*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:7.0.13:7.0.*"},{"vendor_slug":"linux","vendor_name":"Linux","product_slug":"linux","product_name":"Linux","version_start":"7.1","version_start_inclusive":true,"version_end":"*","version_end_inclusive":true,"cpe23_uri":"cve5:linux:linux:7.1:*"}],"exploit_refs":[],"news":[],"references":[{"url":"https://git.kernel.org/stable/c/3e187152f44d76d7633a3855ffd0099e1588b82a","source_type":"MISC","tags":[]},{"url":"https://git.kernel.org/stable/c/b7faf660eefa2047ebc2959ff76da2b6eae2e9e3","source_type":"MISC","tags":[]},{"url":"https://git.kernel.org/stable/c/2fd64bf0ad66ab5de0c73524591d879427ba5aba","source_type":"MISC","tags":[]},{"url":"https://git.kernel.org/stable/c/4cb722747ed25971f35cc47ce5c0e79d7f717713","source_type":"MISC","tags":[]},{"url":"https://git.kernel.org/stable/c/130d6567eb148040eed1b73e1414ad6c27d22bd5","source_type":"MISC","tags":[]},{"url":"https://git.kernel.org/stable/c/294692d3296eee3391c348d7ea6401916d27806c","source_type":"MISC","tags":[]},{"url":"https://git.kernel.org/stable/c/5a79b634ee58786ca627268daefa7744f2af2e14","source_type":"MISC","tags":[]},{"url":"https://git.kernel.org/stable/c/0fd2b00b2d3d05e3eaa13342b3dfb0fa85c226ae","source_type":"MISC","tags":[]}],"timeline":[{"type":"published","at":"2026-06-25T08:39:05.673000Z","label":"CVE published","source":null}]}