CVE-2026-53188
published 2026-06-25CVE-2026-53188: In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate the passed in fops for ib_get_ucaps() Sashiko pointed out it is not…
PriorityP342high8.8CVSS 3.1
AVLACLPRLUINSCCHIHAH
EPSS
0.14%
3.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Validate the passed in fops for ib_get_ucaps()
Sashiko pointed out it is not safe to rely only on the devt because
char/block alias so if the user finds a block device with the same dev_t
it can masquerade as a ucap cdev fd.
Test the f_ops to only accept authentic cdevs.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| linux | linux | — | — |
| linux | linux | >= 61e51682816d395307f78ae06d640089054c28ab < 96b6e98ff12d50ed5817230c6f1188e1150d225d | 96b6e98ff12d50ed5817230c6f1188e1150d225d |
| linux | linux | >= 61e51682816d395307f78ae06d640089054c28ab < aa181287ebdcc53ee0ba5c2f8243e2d541ebc19b | aa181287ebdcc53ee0ba5c2f8243e2d541ebc19b |
| linux | linux | >= 61e51682816d395307f78ae06d640089054c28ab < 4a1b1ac2744694a2ecd66a84bdb1445f4ef24bee | 4a1b1ac2744694a2ecd66a84bdb1445f4ef24bee |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 6.15 < 6.18.36 | 6.18.36 |
| linux | linux_kernel | >= 6.19 < 7.0.13 | 7.0.13 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate the passed in fops for ib_get_ucaps() Sashiko pointed out it is not safe to rely only on the devt because char
ghsa_unreviewed·2026-06-25
CVE-2026-53188 In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate the passed in fops for ib_get_ucaps() Sashiko pointed out it is not safe to rely only on the devt because char
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Validate the passed in fops for ib_get_ucaps()
Sashiko pointed out it is not safe to rely only on the devt because
char/block alias so if the user finds a block device with the same dev_t
it can masquerade as a ucap cdev fd.
Test the f_ops to only accept authentic cdevs.
Red Hat
kernel: RDMA/core: Validate the passed in fops for ib_get_ucaps()
vendor_redhat·2026-06-25·CVSS 5.5
CVE-2026-53188 [MEDIUM] CWE-351 kernel: RDMA/core: Validate the passed in fops for ib_get_ucaps()
kernel: RDMA/core: Validate the passed in fops for ib_get_ucaps()
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Validate the passed in fops for ib_get_ucaps()
Sashiko pointed out it is not safe to rely only on the devt because
char/block alias so if the user finds a block device with the same dev_t
it can masquerade as a ucap cdev fd.
Test the f_ops to only accept authentic cdevs.
A flaw was found in the Linux kernel's RDMA/core component. This vulnerability arises from insufficient validation of file operations (fops) passed to the ib_get_ucaps() function. A local attacker could exploit this by creating a block device with a device number (dev_t) that aliases a character device (char/block alias), allowing them to masquerade as a legitimate user capabili
No detection rules found.
No public exploits indexed.
2026-06-25
Published