In the Linux kernel, the following vulnerability has been resolved:

nvmem: layouts: onie-tlv: fix hang on unknown types

The EEPROM on my board has a vendor specific entry of type 0x41. When
stumbling upon that, this driver hangs in an endless loop.

Fix it by keep incrementing the offset on unknown entries, so the loop
will eventually stop.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
d3c0d12f6474216bf386101e2449cc73e5c5b61d affected < 033d498b0f473c6456be5f885be172024ad84972
d3c0d12f6474216bf386101e2449cc73e5c5b61d affected < fd47edeabadfaa75422009dc5894e92c4c697517
d3c0d12f6474216bf386101e2449cc73e5c5b61d affected < 4a4d21f531ccf5bb333d99b620e0d66551f3652c
d3c0d12f6474216bf386101e2449cc73e5c5b61d affected < 4f27eb01619c36cc8e3ce9a2a9af97f145f5d1c6
d3c0d12f6474216bf386101e2449cc73e5c5b61d affected < ea41020b9018e31c2ea7e9d89021e3e6d7470883
Linux Linux affected
Version Status Constraints
6.4 affected —
0 unaffected < 6.4
6.6.143 unaffected ≤ 6.6.*
6.12.94 unaffected ≤ 6.12.*
6.18.36 unaffected ≤ 6.18.*
7.0.13 unaffected ≤ 7.0.*
7.1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/033d498b0f473c6456be5f885be172024ad84972 cve-icon
https://git.kernel.org/stable/c/4a4d21f531ccf5bb333d99b620e0d66551f3652c cve-icon
https://git.kernel.org/stable/c/4f27eb01619c36cc8e3ce9a2a9af97f145f5d1c6 cve-icon
https://git.kernel.org/stable/c/ea41020b9018e31c2ea7e9d89021e3e6d7470883 cve-icon
https://git.kernel.org/stable/c/fd47edeabadfaa75422009dc5894e92c4c697517 cve-icon
History

Wed, 01 Jul 2026 13:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: nvmem: layouts: onie-tlv: fix hang on unknown types The EEPROM on my board has a vendor specific entry of type 0x41. When stumbling upon that, this driver hangs in an endless loop. Fix it by keep incrementing the offset on unknown entries, so the loop will eventually stop.
Title nvmem: layouts: onie-tlv: fix hang on unknown types
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-01T13:32:18.489Z

Reserved: 2026-06-09T07:44:35.399Z

Link: CVE-2026-53336

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.