CVE-2026-53188

HighCVSS 8.8/10Last modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/core: Validate the passed in fops for ib_get_ucaps()

Sashiko pointed out it is not safe to rely only on the devt because char/block alias so if the user finds a block device with the same dev_t it can masquerade as a ucap cdev fd.

Test the f_ops to only accept authentic cdevs.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-285

Affected software

VendorProductVersions
LinuxLinux>= 61e51682816d395307f78ae06d640089054c28ab, < 96b6e98ff12d50ed5817230c6f1188e1150d225d; >= 61e51682816d395307f78ae06d640089054c28ab, < aa181287ebdcc53ee0ba5c2f8243e2d541ebc19b; >= 61e51682816d395307f78ae06d640089054c28ab, < 4a1b1ac2744694a2ecd66a84bdb1445f4ef24bee
LinuxLinux6.15

References

Timeline

Published
Jun 25, 2026
Last modified
Oct 19, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-531897.8In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: update file PMD counter before folio_put() __split_hugCVE-2026-53194.3A security vulnerability has been detected in itsourcecode Payroll Management System up to 1.0. Affected is an unknown function of the file CVE-2026-531905.5In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fencCVE-2026-531917.8In the Linux kernel, the following vulnerability has been resolved: io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retries CVE-2026-531927.8In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Fix UAF at snd_timer_user_params() At releasing a timer oCVE-2026-531937.8In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Forcibly close timer instances at closing When snd_timer CVE-2026-531947.8In the Linux kernel, the following vulnerability has been resolved: USB: serial: kl5kusb105: fix bulk-out buffer overflow klsi_105_prepareCVE-2026-531957.8In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() build_i2c_CVE-2026-531966.8In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in get_manuf_info() get_manuf_inCVE-2026-531975.5In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state() iptfs_destroy_CVE-2026-531988.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCELCVE-2026-531997.5In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf netvsc_copy_
CVE-2026-53188: High severity, CVSS 8.8 | Vulnix