PT-2026-52255 · Linux · Linux

Published 2026-06-25 · Updated 2026-06-25 · CVE-2026-53159

Mitre

In the Linux kernel, the following vulnerability has been resolved:

misc: fastrpc: fix DMA address corruption due to find vma misuse

fastrpc get args() uses find vma() to look up the VMA for a user-provided pointer and compute a DMA address offset. When the address falls in a gap before the returned VMA, (ptr & PAGE MASK) - vma->vm start underflows, corrupting the DMA address sent to the DSP.

Replace find vma() with vma lookup(), which returns NULL when the address is not contained within any VMA.

Related Identifiers

CVE-2026-53159

Affected Products

Linux

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-53159 · Security Note
• https://git.kernel.org/stable/c/53e06f8a3c2b085c31bf1284e2ebcb8036e99625 · Note
• https://git.kernel.org/stable/c/e69e306a4cccb40a73511350cb280825a556ce3c · Note
• https://git.kernel.org/stable/c/464c6ad2aa16e1e1df9d559289199356493d1e00 · Note
• https://git.kernel.org/stable/c/2d0f47e27c1fa718b29c69aa7c96a2c5161bc2c2 · Note
• https://git.kernel.org/stable/c/7ba7b30ddb04646d4d638f4d8c4718a304bbbddd · Note
• https://git.kernel.org/stable/c/d3e26df2e8eb361e6bef096b2fd565476a1f14c4 · Note
• https://git.kernel.org/stable/c/708c17b52c60fe7a57e73b495bdee50f58feb48c · Note