In the Linux kernel, the following vulnerability has been resolved: soc/tegra: cbb: Fix cross-fabric target timeout lookup When a fabric receives an… (CVE-2026-53310)
In the Linux kernel, the following vulnerability has been resolved: soc/tegra: cbb: Fix cross-fabric target timeout lookup When a fabric receives an error interrupt, the error may have occurred on a different fabric. The target timeout lookup was using the wrong base address (cbb->regs) with offsets from a different fabric's target map, causing a kernel page fault. Unable to handle kernel paging request at virtual address ffff80000954cc00 pc : tegra234_cbb_get_tmo_slv+0xc/0x28 Call trace: tegra234_cbb_get_tmo_slv+0xc/0x28 print_err_notifier+0x6c0/0x7d0 tegra234_cbb_isr+0xe4/0x1b4 Add tegra234_cbb_get_fabric() to look up the correct fabric device using fab_id, and use its base address for accessing target timeout registers.
AI Analysis
Technical Summary
The Linux kernel vulnerability (CVE-2026-53310) involves the soc/tegra cbb driver where error interrupts from one fabric could cause the kernel to access target timeout registers using the base address of a different fabric. This incorrect lookup caused kernel page faults, as demonstrated by a paging request failure in the tegra234_cbb_get_tmo_slv function. The fix introduced a new function, tegra234_cbb_get_fabric(), to correctly identify the fabric device by fab_id and use the appropriate base address for target timeout register access, preventing the page fault.
Potential Impact
The vulnerability causes kernel page faults leading to denial of service (system instability or crash) when error interrupts are received and handled incorrectly. There is no indication of confidentiality or integrity impact. The impact is limited to availability disruption due to kernel crashes.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The description indicates that a fix has been implemented in the Linux kernel source code by correcting the fabric lookup logic. Users should monitor official Linux kernel releases and apply updates that include this fix once available.
In the Linux kernel, the following vulnerability has been resolved: soc/tegra: cbb: Fix cross-fabric target timeout lookup When a fabric receives an… (CVE-2026-53310)
Description
In the Linux kernel, the following vulnerability has been resolved: soc/tegra: cbb: Fix cross-fabric target timeout lookup When a fabric receives an error interrupt, the error may have occurred on a different fabric. The target timeout lookup was using the wrong base address (cbb->regs) with offsets from a different fabric's target map, causing a kernel page fault. Unable to handle kernel paging request at virtual address ffff80000954cc00 pc : tegra234_cbb_get_tmo_slv+0xc/0x28 Call trace: tegra234_cbb_get_tmo_slv+0xc/0x28 print_err_notifier+0x6c0/0x7d0 tegra234_cbb_isr+0xe4/0x1b4 Add tegra234_cbb_get_fabric() to look up the correct fabric device using fab_id, and use its base address for accessing target timeout registers.
CVSS v3.1
Score 5.5medium
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel vulnerability (CVE-2026-53310) involves the soc/tegra cbb driver where error interrupts from one fabric could cause the kernel to access target timeout registers using the base address of a different fabric. This incorrect lookup caused kernel page faults, as demonstrated by a paging request failure in the tegra234_cbb_get_tmo_slv function. The fix introduced a new function, tegra234_cbb_get_fabric(), to correctly identify the fabric device by fab_id and use the appropriate base address for target timeout register access, preventing the page fault.
Potential Impact
The vulnerability causes kernel page faults leading to denial of service (system instability or crash) when error interrupts are received and handled incorrectly. There is no indication of confidentiality or integrity impact. The impact is limited to availability disruption due to kernel crashes.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The description indicates that a fix has been implemented in the Linux kernel source code by correcting the fabric lookup logic. Users should monitor official Linux kernel releases and apply updates that include this fix once available.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-fpxp-9g9j-vhm7
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-53310"]
- Ecosystems
- []
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6a4c33fd27e9c797195f27e6
Added to database: 07/06/2026, 23:02:21 UTC
Last enriched: 07/06/2026, 23:09:05 UTC
Last updated: 07/31/2026, 19:24:49 UTC
Views: 9
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.