CVE-2026-53137

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds write can occur during HDCP 2.x repeater authentication over HDMI. The driver reads the sink's RxStatus register and extracts a 10-bit message size field, which is then used as the read length for the ReceiverID list. Because this value is not clamped to the size of the destination buffer rx id list[177], a malicious HDMI repeater could advertise a message size larger than the buffer, leading to memory corruption during the I2C read process within the mod hdcp read rx id list() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.