CVE-2026-53021

scsi: target: core: Fix integer overflow in UNMAP bounds check

MEDIUM

5.5

CVSS Score

Published: June 24, 2026 at 04:29 PM UTC

Updated: July 15, 2026 at 02:24 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix integer overflow in UNMAP bounds check sbc_execute_unmap() checks LBA + range does not exceed the device capacity, but does not guard against LBA + range wrapping around on 64-bit overflow. Add an overflow check matching the pattern already used for WRITE_SAME in the same file.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

3.10 ≤ v < 5.10.2583.10 ≤ v < 5.15.2093.10 ≤ v < 6.1.1753.10 ≤ v < 6.12.913.10 ≤ v < 6.18.333.10 ≤ v < 6.6.1413.10 ≤ v < 7.0.103.10 ≤ v < 7.15.11 ≤ v < 5.15.2095.16 ≤ v < 6.1.1756.13 ≤ v < 6.18.336.19 ≤ v < 7.0.106.2 ≤ v < 6.6.1416.7 ≤ v < 6.12.913.1086d7182985d25900929adce14fffd729cc8c6fb8

Vendor states this is fixed in 02115986d027ade793e7f6be87e91d6a796d0aa3 (fixed)

Vendor states this is fixed in 2bf2d65f76697820dbc4227d13866293576dd90a (fixed)

Vendor states this is fixed in 2e1ed9a7b6ea5bfefb5d80a02b1c71c7dee1f0dd (fixed)

Vendor states this is fixed in 3facdecc3fcf115cc4f9b3d8f118d6705e2456a8 (fixed)

Vendor states this is fixed in 51075df70c46e60a9773f2dcd28299e40dac36fb (fixed)

Vendor states this is fixed in 5efc3ef4758f8d98c257419fa21daca3227de61a (fixed)

Vendor states this is fixed in c08ab702c4699c6efb9d60bdb15b73e7a627ee7e (fixed)

Vendor states this is fixed in d7aef29573c7c5cdb2dfad939253287a6329c2a4 (fixed)

Vendor states this is fixed in 3.10 (unaffected)

Vendor states this is fixed in 5.10.258 (unaffected)

Vendor states this is fixed in 5.15.209 (unaffected)

Vendor states this is fixed in 6.1.175 (unaffected)