CVE-2026-53136

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds heap write can occur during driver probe due to missing validation of the HdmiRegNum and Hdmi6GRegNum fields within the VBIOS integrated info tables (v1 11 and v2 1). These fields are used as loop bounds when copying retimer I2C register settings into the fixed-size arrays dp* ext hdmi reg settings[9] and dp* ext hdmi 6g reg settings[3]. A malformed VBIOS can specify values up to 255, exceeding the array capacities. This issue is handled in the get integrated info v11() and get integrated info v2 1() functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.