What’s Vulnerable › Vulnerabilities

CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-25 · updated 2026-10-19
• Weakness: CWE-681

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Fix truncation for block sizes >= 4G When the iommu is used the linearization of the mapping can give a single block that is very large split across multiple SG entries. When __rdma_block_iter_next() reassembles the split SG entries it is overflowing the 32 bit stack values and computed the wrong DMA addresses for blocks after the truncation. Use the right types to hold DMA addresses.

Affected products

• Linux kernel: from 5.2 before 5.10.259; from 5.11 before 5.15.210; from 5.16 before 6.1.176; from 6.2 before 6.6.143; from 6.7 before 6.12.94; from 6.13 before 6.18.36 — fixed in 5.10.259, 5.15.210, 6.1.176, 6.12.94, 6.18.36, 6.6.143

How to fix

Upgrade to a fixed version: Linux kernel 5.10.259, 5.15.210, 6.1.176, 6.12.94. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/15fe76e23615f502d051ef0768f86babaf08746c
• https://git.kernel.org/stable/c/2ff4b7817e5b78070c30f5fb5e678e452a2628b3
• https://git.kernel.org/stable/c/8fe0231adebe086c8a459c790944ac026cd99c6e
• https://git.kernel.org/stable/c/ac1aad8e1281534ce936c250f68084fc79c5469e
• https://git.kernel.org/stable/c/afd35fec9297195b759078745549c2671223f24f
• https://git.kernel.org/stable/c/baf8685bcf56dc1efb44b8f6a57c42516e549068
• https://git.kernel.org/stable/c/cc644d5608e3b0dadc970bd6e6aa26b91ea07d0f
• https://git.kernel.org/stable/c/dee2a49adeeb2a5e16a3fc858fa21b841c519802

Get alerted when CVE-2026-53133 or the next vulnerability affects your stack