CVE-2026-53329

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Use krealloc_array() in dal_vector_reserve() [Why & How] dal_vector_reserve() computes the allocation size as "capacity * vector->struct_size" using uint32_t arithmetic, which can silently wrap to a small value on overflow. This would cause krealloc to return a smaller buffer than expected, leading to heap overflows on subsequent vector appends. Replace krealloc() with krealloc_array() which performs an internal overflow check and returns NULL on wrap, preventing the issue. (cherry picked from commit 37668568641ccc4cc1dbca4923d0a16609dd5707)

EPSS — Exploit Prediction

0.0020

Probability of exploitation

0.09%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/201151e120f0062bcda21cad5d007b82725ad23b https://git.kernel.org/stable/c/31180638a33acad12c863132704a76536fb66211 https://git.kernel.org/stable/c/9540b0a4d13e4ede64ae1197d66a176d2149daa9 https://git.kernel.org/stable/c/a914aa802669e073f014dae2e5708633b5cecd34 https://git.kernel.org/stable/c/b15825deac1acff72638bbc8f05b89ceef8dfb13 https://git.kernel.org/stable/c/da48bc4461b8a5ebfb9264c9b191a701d8e99009 https://git.kernel.org/stable/c/de988c7a31f0774f07894cfe4802996f318e2870 https://git.kernel.org/stable/c/e09689286385a66311ac6922af95339d7a3cef8d

Frequently Asked Questions

What is CVE-2026-53329? +

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Use krealloc_array() in dal_vector_reserve() [Why & How] dal_vector_reserve() computes the allocation size as "capacity * vector->struct_size" using uint32_t arithmetic, which can silently wrap to a small value on overflow. This would cause krealloc to return a smaller buffer than expected, leading to heap overflows on subsequent vector appends. Replace krealloc() with krealloc_array() which performs an internal overflow check and returns NULL on wrap, preventing the issue. (cherry picked from commit 37668568641ccc4cc1dbca4923d0a16609dd5707)

How do I check if I'm vulnerable to CVE-2026-53329? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Description

EPSS — Exploit Prediction

References

Other References

Frequently Asked Questions

Don't wait for an exploit