Strix
64.7K

CVE-2026-97421

HIGHCVSS 7.8/10

Last modified

CVE-2026-97421 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() Several corner cases, especially important on 32 bits: - umem->iova is u64, the function argument should pass in u64 or iova will be truncated - Check that the length is not too large for the iova - Check that lengths > 4G don't overflow the GENMASK.

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() Several corner cases, especially important on 32 bits: - umem->iova is u64, the function argument should pass in u64 or iova will be truncated - Check that the length is not too large for the iova - Check that lengths > 4G don't overflow the GENMASK

Metrics

CVSS 3.1
7.8/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= a40c20dabdf9045270767c75918feb67f0727c89, < ae3cf7d2c4d506c5c91746321644e1a08d989e2a; >= a40c20dabdf9045270767c75918feb67f0727c89, < 5fc5b73109540809b094710fac44da81dd8a3ff8; >= a40c20dabdf9045270767c75918feb67f0727c89, < 09ea6837a0434fb4db99528a5055b6d822135dcf; 85e40ba1c4a5246b35e91c2ed69d4680426904d7; 59f07434b297e2268f5d5c567db5b09145245cf1; 488229b7729d7becf4c39c5e74fb709fb35115c2; >= 5.4.73, < 5.5; >= 5.8.17, < 5.9; >= 5.9.2, < 5.10
LinuxLinux5.10

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-97421?
In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() Several corner cases, especially important on 32 bits: - umem->iova is u64, the function argument should pass in u64 or iova will be truncated - Check that the length is not too large for the iova - Check that lengths > 4G don't overflow the GENMASK
How severe is CVE-2026-97421?
CVE-2026-97421 has a CVSS score of 7.8/10 (HIGH severity).
How do I fix CVE-2026-97421?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-97421?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST