CVE-2026-53329

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-53329
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53329.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-53329
Downstream
Related
Published
2026-07-01T13:32:14.598Z
Modified
2026-07-25T03:56:29.833201279Z
Severity
  • 7.0 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
drm/amd/display: Use krealloc_array() in dal_vector_reserve()
Details

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Use kreallocarray() in dalvector_reserve()

[Why & How] dalvectorreserve() computes the allocation size as "capacity * vector->structsize" using uint32t arithmetic, which can silently wrap to a small value on overflow. This would cause krealloc to return a smaller buffer than expected, leading to heap overflows on subsequent vector appends.

Replace krealloc() with krealloc_array() which performs an internal overflow check and returns NULL on wrap, preventing the issue.

(cherry picked from commit 37668568641ccc4cc1dbca4923d0a16609dd5707)

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53329.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2004f45ef83f07f43f5da6ede780b08068c7583d
Fixed
9540b0a4d13e4ede64ae1197d66a176d2149daa9
Fixed
31180638a33acad12c863132704a76536fb66211
Fixed
b15825deac1acff72638bbc8f05b89ceef8dfb13
Fixed
201151e120f0062bcda21cad5d007b82725ad23b
Fixed
a914aa802669e073f014dae2e5708633b5cecd34
Fixed
e09689286385a66311ac6922af95339d7a3cef8d
Fixed
de988c7a31f0774f07894cfe4802996f318e2870
Fixed
da48bc4461b8a5ebfb9264c9b191a701d8e99009

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53329.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
5.10.260
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.210
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.176
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.143
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.94
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.36
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.13

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53329.json"