{"id":"CVE-2026-53133","title":"RDMA/umem: Fix truncation for block sizes >= 4G","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/umem: Fix truncation for block sizes >= 4G\n\nWhen the iommu is used the linearization of the mapping can give a single\nblock that is very large split across multipl…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= a808273a495c657e33281b181fd7fcc2bb28f662 < 2ff4b7817e5b78070c30f5fb5e678e452a2628b3","Linux >= a808273a495c657e33281b181fd7fcc2bb28f662 < dee2a49adeeb2a5e16a3fc858fa21b841c519802","Linux >= a808273a495c657e33281b181fd7fcc2bb28f662 < cc644d5608e3b0dadc970bd6e6aa26b91ea07d0f","Linux >= a808273a495c657e33281b181fd7fcc2bb28f662 < 8fe0231adebe086c8a459c790944ac026cd99c6e","Linux >= a808273a495c657e33281b181fd7fcc2bb28f662 < baf8685bcf56dc1efb44b8f6a57c42516e549068","Linux >= a808273a495c657e33281b181fd7fcc2bb28f662 < afd35fec9297195b759078745549c2671223f24f","Linux >= a808273a495c657e33281b181fd7fcc2bb28f662 < ac1aad8e1281534ce936c250f68084fc79c5469e","Linux >= a808273a495c657e33281b181fd7fcc2bb28f662 < 15fe76e23615f502d051ef0768f86babaf08746c","Linux 5.2"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-16T15:25:53.072186Z"},"published":"2026-06-25","updated":"2026-10-16","sourceUpdated":"2026-10-16T15:31:33.511Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-53133","references":[{"url":"https://git.kernel.org/stable/c/2ff4b7817e5b78070c30f5fb5e678e452a2628b3"},{"url":"https://git.kernel.org/stable/c/dee2a49adeeb2a5e16a3fc858fa21b841c519802"},{"url":"https://git.kernel.org/stable/c/cc644d5608e3b0dadc970bd6e6aa26b91ea07d0f"},{"url":"https://git.kernel.org/stable/c/8fe0231adebe086c8a459c790944ac026cd99c6e"},{"url":"https://git.kernel.org/stable/c/baf8685bcf56dc1efb44b8f6a57c42516e549068"},{"url":"https://git.kernel.org/stable/c/afd35fec9297195b759078745549c2671223f24f"},{"url":"https://git.kernel.org/stable/c/ac1aad8e1281534ce936c250f68084fc79c5469e"},{"url":"https://git.kernel.org/stable/c/15fe76e23615f502d051ef0768f86babaf08746c"}],"tags":["cve.org"],"epss":0.00129,"epssPercentile":0.02274,"ingestedAt":"2026-10-16T17:24:46.732Z","slug":"CVE-2026-53133","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/umem: Fix truncation for block sizes >= 4G\n\nWhen the iommu is used the linearization of the mapping can give a single\nblock that is very large split across multiple SG entries.\n\nWhen __rdma_block_iter_next() reassembles the split SG entries it is\noverflowing the 32 bit stack values and computed the wrong DMA addresses\nfor blocks after the truncation.\n\nUse the right types to hold DMA addresses.\n\n## Affected\n\n- `Linux >= a808273a495c657e33281b181fd7fcc2bb28f662 < 2ff4b7817e5b78070c30f5fb5e678e452a2628b3`\n- `Linux >= a808273a495c657e33281b181fd7fcc2bb28f662 < dee2a49adeeb2a5e16a3fc858fa21b841c519802`\n- `Linux >= a808273a495c657e33281b181fd7fcc2bb28f662 < cc644d5608e3b0dadc970bd6e6aa26b91ea07d0f`\n- `Linux >= a808273a495c657e33281b181fd7fcc2bb28f662 < 8fe0231adebe086c8a459c790944ac026cd99c6e`\n- `Linux >= a808273a495c657e33281b181fd7fcc2bb28f662 < baf8685bcf56dc1efb44b8f6a57c42516e549068`\n- `Linux >= a808273a495c657e33281b181fd7fcc2bb28f662 < afd35fec9297195b759078745549c2671223f24f`\n- `Linux >= a808273a495c657e33281b181fd7fcc2bb28f662 < ac1aad8e1281534ce936c250f68084fc79c5469e`\n- `Linux >= a808273a495c657e33281b181fd7fcc2bb28f662 < 15fe76e23615f502d051ef0768f86babaf08746c`\n- `Linux 5.2`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}