CVE-2026-97421

Summary

In the Linux kernel, the following vulnerability has been resolved:

RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()

Several corner cases, especially important on 32 bits:

  • umem->iova is u64, the function argument should pass in u64 or iova will be truncated
  • Check that the length is not too large for the iova
  • Check that lengths > 4G don't overflow the GENMASK

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxa40c20dabdf9045270767c75918feb67f0727c89 < ae3cf7d2c4d506c5c91746321644e1a08d989e2aaffected
LinuxLinuxa40c20dabdf9045270767c75918feb67f0727c89 < 5fc5b73109540809b094710fac44da81dd8a3ff8affected
LinuxLinuxa40c20dabdf9045270767c75918feb67f0727c89 < 09ea6837a0434fb4db99528a5055b6d822135dcfaffected
LinuxLinux85e40ba1c4a5246b35e91c2ed69d4680426904d7affected
LinuxLinux59f07434b297e2268f5d5c567db5b09145245cf1affected
LinuxLinux488229b7729d7becf4c39c5e74fb709fb35115c2affected
LinuxLinux5.4.73 < 5.5affected
LinuxLinux5.8.17 < 5.9affected
LinuxLinux5.9.2 < 5.10affected
LinuxLinux5.10affected
LinuxLinux0 < 5.10unaffected
LinuxLinux6.12.111 <= 6.12.*unaffected
LinuxLinux6.18.53 <= 6.18.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References