CVE-2026-53188: RDMA/core: Validate the passed in fops for ib_get_ucaps()

High severity · published Jun 25, 2026

CVE-2026-53188

RDMA/core: Validate the passed in fops for ib_get_ucaps()

8.8

CVSS

0.2%

EPSS

On KEV

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate the passed in fops for ib_get_ucaps() Sashiko pointed out it is not safe to rely only on the devt because char/block alias so if the user finds a block device with the same dev_t it can masquerade as a ucap cdev fd. Test the f_ops to only accept authentic cdevs.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Changed

Exploitation

Is it being used?

Exploit prediction (EPSS)0.2% · higher than 5% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Kernel · Linux

6.15 before 6.18.36; 6.19 before 7.0.13; 7.1; 7.1; 7.1; 7.1; +3 more · source: NVD

Linux · Linux

61e51682816d395307f78ae06d640089054c28ab before 96b6e98ff12d50ed5817230c6f1188e1150d225d; 61e51682816d395307f78ae06d640089054c28ab before aa181287ebdcc53ee0ba5c2f8243e2d541ebc19b; 61e51682816d395307f78ae06d640089054c28ab before 4a1b1ac2744694a2ecd66a84bdb1445f4ef24bee; 6.15 · source: vendor

Affected product

Kernel

Linux

All Kernel CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-53188

CVE.org

https://www.cve.org/CVERecord?id=CVE-2026-53188

Patch

https://git.kernel.org/stable/c/4a1b1ac2744694a2ecd66a84bdb1445f4ef24bee

Patch

https://git.kernel.org/stable/c/96b6e98ff12d50ed5817230c6f1188e1150d225d

Patch

https://git.kernel.org/stable/c/aa181287ebdcc53ee0ba5c2f8243e2d541ebc19b