Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate the passed in fops for ib_get_ucaps() Sashiko pointed out it is not safe to rely only on the devt because char/block alias so if the user finds a block device with the same dev_t it can masquerade as a ucap cdev fd. Test the f_ops to only accept authentic cdevs.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 6.15, < 6.18.36 |
References
- https://git.kernel.org/stable/c/4a1b1ac2744694a2ecd66a84bdb1445f4ef24beePatch
- https://git.kernel.org/stable/c/96b6e98ff12d50ed5817230c6f1188e1150d225dPatch
- https://git.kernel.org/stable/c/aa181287ebdcc53ee0ba5c2f8243e2d541ebc19bPatch
FAQ
What is CVE-2026-53188?
CVE-2026-53188 is a vulnerability with a CVSS score of 8.8 (HIGH). In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate the passed in fops for ib_get_ucaps() Sashiko pointed out it is not safe to rely only on the devt because char...
How severe is CVE-2026-53188?
CVE-2026-53188 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-53188?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.