CVE-2026-53133
RDMA/umem: Fix truncation for block sizes >= 4G
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
25 Jun 2026Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In the Linux kernel, the following vulnerability has been resolved:
RDMA/umem: Fix truncation for block sizes >= 4G
When the iommu is used the linearization of the mapping can give a single
block that is very large split across multiple SG entries.
When __rdma_block_iter_next() reassembles the split SG entries it is
overflowing the 32 bit stack values and computed the wrong DMA addresses
for blocks after the truncation.
Use the right types to hold DMA addresses.
Affected products
Linux · LinuxWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
https://git.kernel.org/stable/c/15fe76e23615f502d051ef0768f86babaf08746chttps://git.kernel.org/stable/c/2ff4b7817e5b78070c30f5fb5e678e452a2628b3https://git.kernel.org/stable/c/8fe0231adebe086c8a459c790944ac026cd99c6ehttps://git.kernel.org/stable/c/ac1aad8e1281534ce936c250f68084fc79c5469ehttps://git.kernel.org/stable/c/afd35fec9297195b759078745549c2671223f24fhttps://git.kernel.org/stable/c/baf8685bcf56dc1efb44b8f6a57c42516e549068https://git.kernel.org/stable/c/cc644d5608e3b0dadc970bd6e6aa26b91ea07d0fhttps://git.kernel.org/stable/c/dee2a49adeeb2a5e16a3fc858fa21b841c519802