Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
CVE-2026-53188: Linux kernel: Unauthorized access to RDMA capabilities
CVE-2026-53188
Summary
An attacker could use a malicious device to gain unauthorized access to RDMA capabilities. This vulnerability has been fixed in the Linux kernel, so updates should be applied to ensure security. Users and administrators should install the latest kernel version to address this issue.
Original title
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Validate the passed in fops for ib_get_ucaps()
Sashiko pointed out it is not safe to rely only on the devt because
c...
Original description
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Validate the passed in fops for ib_get_ucaps()
Sashiko pointed out it is not safe to rely only on the devt because
char/block alias so if the user finds a block device with the same dev_t
it can masquerade as a ucap cdev fd.
Test the f_ops to only accept authentic cdevs.
RDMA/core: Validate the passed in fops for ib_get_ucaps()
Sashiko pointed out it is not safe to rely only on the devt because
char/block alias so if the user finds a block device with the same dev_t
it can masquerade as a ucap cdev fd.
Test the f_ops to only accept authentic cdevs.
Published: 25 Jun 2026 · Updated: 29 Jun 2026 · First seen: 25 Jun 2026