Linux Kernel Vulnerability in NVMEM Driver Affecting Device Functionality

CVE-2026-53336

What is CVE-2026-53336?

A vulnerability in the NVMEM driver within the Linux kernel allows the driver to hang when encountering vendor-specific EEPROM entries of unknown types, notably type 0x41. This results in an endless loop during operation, causing disruptions in device functionality. A patch has been implemented to handle unknown entries more effectively by incrementing the offset, ensuring that the process will eventually terminate correctly and prevent system hang-ups.

References