CVE-2026-53047

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An undersized allocation occurs in the efi capsule setup info() function due to the use of sizeof(phys addr t *) instead of sizeof(phys addr t) during a krealloc() call for the cap info->phys variable. This inconsistency affects 32-bit systems with PAE (Physical Address Extension), where phys addr t is 64-bit but pointers are 32-bit, resulting in the allocation of only half the required space. This condition may lead to a heap buffer overflow when storing physical addresses via the efi capsule write() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.