Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed
(max. allowed matches exceeded)
Permalink CVE-2026-53356
created 2 weeks, 2 days ago Activity log
  • Created & dismissed (max. allowed matches exceeded) suggestion 2 weeks, 2 days ago
drm/i915/gem: Fix phys BO pread/pwrite with offset

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix phys BO pread/pwrite with offset sg_page() returns struct page pointer not (void *) so the scaling of pread/pwrite is wrong for phys BO and wrong parts of BO would be accessed if non-zero offset is used. Last impacted platform with overlay or cursor planes using phys mapping was Gen3/945G/Lakeport. (cherry picked from commit 3e49a2f85070b2fb672c1e0fdba281a4ea3aebe6)

Affected products

Linux
  • =<*
  • <40f738991058eb3e3530c3006a5bd6fd5e29f035
  • ==5.7
  • <32d4c5d328a3ff995420f4f85163e1e403f43628
  • =<6.12.*
  • <1ec8fc63e9cdb22da54e48e536c9204020416fc6
  • <d21ad938398bca695a511307de38a65889e3b354
  • =<5.10.*
  • <5.7
  • =<6.1.*
  • =<6.6.*
  • <14469860e2e39b7095dcd658d2bad38a11110a68
  • =<6.18.*
  • <07c33be968d9e0cab6cba38c81850a09942fcb2e
  • =<5.15.*
  • <dd51a2eeb93bc6faa892ff9083911dd23f82c187
  • =<7.0.*
  • <3bd168dd835b93a3862cd05b0d13c432b115f9d6