Riskcovery

CVE-2026-53188

RDMA/core: Validate the passed in fops for ib_get_ucaps()

State
Published
Severity
8.8 High
Published
Jun 25, 2026
Updated
Oct 19, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/core: Validate the passed in fops for ib_get_ucaps()

Sashiko pointed out it is not safe to rely only on the devt because char/block alias so if the user finds a block device with the same dev_t it can masquerade as a ucap cdev fd.

Test the f_ops to only accept authentic cdevs.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HLinux

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 61e51682816d395307f78ae06d640089054c28ab to before 96b6e98ff12d50ed5817230c6f1188e1150d225dAffected
  • 61e51682816d395307f78ae06d640089054c28ab to before aa181287ebdcc53ee0ba5c2f8243e2d541ebc19bAffected
  • 61e51682816d395307f78ae06d640089054c28ab to before 4a1b1ac2744694a2ecd66a84bdb1445f4ef24beeAffected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.18.36 through 6.18.*Not affected
  • 7.0.13 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.