Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-53137

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size [Why & How] During HDCP 2.x repeater authentication over HDMI, the driver reads the sink's RxStatus register and extracts a 10-bit message size field (max value 1023). This value is used as the read length for the ReceiverID list without being clamped to the size of the destination buffer rx_id_list[177]. A malicious HDMI repeater could advertise a message size l
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:a5685a0643fa01a71d48e57c3d04a706be3f13706b3bc3718cfd2b08bacdcf79
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"3c4444aec06c74fbc05661f370954ac814963c38","status":"affected","version":"eff682f83c9c2030761e7536c5d97e1b20f71c15","versionType":"git"},{"lessThan":"91fb41218c413989d8b6c837748751454b452d68","status":"affected","version":"eff682f83c9c2030761e7536c5d97e1b20f71c15","versionType":"git"},{"lessThan":"964e50ef7b8f09815a7d05b8326af700f8d5bc96","status":"affected","vers…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:0e63b211ac2d13450e392325fb354d520d647bc38915da53cafde7f3a6e62597 · sha256:154c2275a5e2972f… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.6"},{"lessThan":"5.6","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","vers…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:0e63b211ac2d13450e392325fb354d520d647bc38915da53cafde7f3a6e62597 · sha256:154c2275a5e2972f… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"3c4444aec06c74fbc05661f370954ac814963c38","status":"affected","version":"eff682f83c9c2030761e7536c5d97e1b20f71c15","versionType":"git"},{"lessThan":"91fb41218c413989d8b6c837748751454b452d68","status":"affected","version":"eff682f83c9c2030761e7536c5d97e1b20f71c15","versionType":"git"},{"lessThan":"964e50ef7b8f09815a7d05b8326af700f8d5bc96","status":"affected","vers…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:0e63b211ac2d13450e392325fb354d520d647bc38915da53cafde7f3a6e62597 · sha256:154c2275a5e2972f… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.6"},{"lessThan":"5.6","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","vers…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:0e63b211ac2d13450e392325fb354d520d647bc38915da53cafde7f3a6e62597 · sha256:154c2275a5e2972f… · /containers/cna/affected/1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/1906064d50d194a145486e5caf3db3e708b6f6ef"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0e63b211ac2d13450e392325fb354d520d647bc38915da53cafde7f3a6e62597 · sha256:154c2275a5e2972f… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/3c4444aec06c74fbc05661f370954ac814963c38"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0e63b211ac2d13450e392325fb354d520d647bc38915da53cafde7f3a6e62597 · sha256:154c2275a5e2972f… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/79e0273272a05fb26f9b1e55bf1a52eefc3b7b35"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0e63b211ac2d13450e392325fb354d520d647bc38915da53cafde7f3a6e62597 · sha256:154c2275a5e2972f… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/91fb41218c413989d8b6c837748751454b452d68"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0e63b211ac2d13450e392325fb354d520d647bc38915da53cafde7f3a6e62597 · sha256:154c2275a5e2972f… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/964e50ef7b8f09815a7d05b8326af700f8d5bc96"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0e63b211ac2d13450e392325fb354d520d647bc38915da53cafde7f3a6e62597 · sha256:154c2275a5e2972f… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/98cfb7530ea91d8e5e928285cdce58e1131f6e83"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0e63b211ac2d13450e392325fb354d520d647bc38915da53cafde7f3a6e62597 · sha256:154c2275a5e2972f… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/bfba882cfcd08f6540f72f48e786b6404f5d2c5b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0e63b211ac2d13450e392325fb354d520d647bc38915da53cafde7f3a6e62597 · sha256:154c2275a5e2972f… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/f0f3981c43b32cadfe373d636d9e9ca522bb3702"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0e63b211ac2d13450e392325fb354d520d647bc38915da53cafde7f3a6e62597 · sha256:154c2275a5e2972f… · /containers/cna/references/7

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer