SB20260626150 - Out-of-bounds read in Linux kernel infiniband core driver

Description

This security bulletin contains information about 1 vulnerability.

1) Out-of-bounds read (CVE-ID: CVE-2026-53187)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to an out-of-bounds read in UVERBS_METHOD_DMAH_ALLOC in drivers/infiniband/core/uverbs_std_types_dmah.c when processing a user-supplied UVERBS_ATTR_ALLOC_DMAH_CPU_ID value. A local user can supply a cpu_id outside the valid CPU range to cause a denial of service.

On systems built with CONFIG_DEBUG_PER_CPU_MAPS and panic_on_warn enabled, the issue can result in a machine reboot.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/0efbb6b54ff56300867027d8e0800d0e32226a20
• https://git.kernel.org/stable/c/323c98a4ff06aa28114f2bf658fb43eb3b536bbc
• https://git.kernel.org/stable/c/bd5e818be7964c1689fba2dad9e6bd3a827fee74