CVE-2026-53021: scsi: target: core: Fix integer overflow in UNMAP bounds check
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: core: Fix integer overflow in UNMAP bounds check
sbcexecuteunmap() checks LBA + range does not exceed the device capacity, but does not guard against LBA + range wrapping around on 64-bit overflow.
Add an overflow check matching the pattern already used for WRITESAME in the same file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53021?
The severity of CVE-2026-53021 is medium with a CVSS score of 6.1.
How do I fix CVE-2026-53021?
To fix CVE-2026-53021, apply the available patch provided by the Linux kernel maintainers.
What type of vulnerability is CVE-2026-53021?
CVE-2026-53021 is classified as an integer overflow vulnerability in the Linux kernel.
Which software versions are affected by CVE-2026-53021?
CVE-2026-53021 affects certain versions of the Linux kernel, specifically those utilizing the scsi target core.
What is the impact of CVE-2026-53021?
The impact of CVE-2026-53021 could potentially allow for denial of service due to unexpected behavior resulting from integer overflow.