7.8

CVE-2026-97421

RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()

In the Linux kernel, the following vulnerability has been resolved:

RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()

Several corner cases, especially important on 32 bits:

- umem->iova is u64, the function argument should pass in u64 or
  iova will be truncated
- Check that the length is not too large for the iova
- Check that lengths > 4G don't overflow the GENMASK
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version a40c20dabdf9045270767c75918feb67f0727c89
Version < 3014da7587ce006cd08004fd6b257626b314e0a3
Status affected
Version a40c20dabdf9045270767c75918feb67f0727c89
Version < ddccf6cc3861de2fe60986933bead79220e0d797
Status affected
Version a40c20dabdf9045270767c75918feb67f0727c89
Version < e9bbb5f5349ef560ff6f0395564f04c3aa664559
Status affected
Version a40c20dabdf9045270767c75918feb67f0727c89
Version < ae3cf7d2c4d506c5c91746321644e1a08d989e2a
Status affected
Version a40c20dabdf9045270767c75918feb67f0727c89
Version < 5fc5b73109540809b094710fac44da81dd8a3ff8
Status affected
Version a40c20dabdf9045270767c75918feb67f0727c89
Version < 09ea6837a0434fb4db99528a5055b6d822135dcf
Status affected
Version 85e40ba1c4a5246b35e91c2ed69d4680426904d7
Status affected
Version 59f07434b297e2268f5d5c567db5b09145245cf1
Status affected
Version 488229b7729d7becf4c39c5e74fb709fb35115c2
Status affected
Version 5.4.73
Version < 5.5
Status affected
Version 5.8.17
Version < 5.9
Status affected
Version 5.9.2
Version < 5.10
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.10
Status affected
Version 0
Version < 5.10
Status unaffected
Version <= 5.15.*
Version 5.15.222
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.02
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/ae3cf7d2c4d506c5c91746321644e1a08d989e2a
https://git.kernel.org/stable/c/5fc5b73109540809b094710fac44da81dd8a3ff8
https://git.kernel.org/stable/c/09ea6837a0434fb4db99528a5055b6d822135dcf
https://git.kernel.org/stable/c/3014da7587ce006cd08004fd6b257626b314e0a3
https://git.kernel.org/stable/c/ddccf6cc3861de2fe60986933bead79220e0d797
https://git.kernel.org/stable/c/e9bbb5f5349ef560ff6f0395564f04c3aa664559