Medium 5.5Published Jun 24, 2026

CVE-2026-53021scsi: target: core: Fix integer overflow in UNMAP bounds check

Updated under an hour ago (Oct 28, 2026, 4:30 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix integer overflow in UNMAP bounds check sbc_execute_unmap() checks LBA + range does not exceed the device capacity, but does not guard against LBA + range wrapping around on 64-bit overflow. Add an overflow check matching the pattern already used for WRITE_SAME in the same file.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Jun 24, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 86d7182985d25900929adce14fffd729cc8c6fb8 before c08ab702c4699c6efb9d60bdb15b73e7a627ee7e; 86d7182985d25900929adce14fffd729cc8c6fb8 builds before 2e1ed9a7b6ea5bfefb5d80a02b1c71c7dee1f0dd; 86d7182985d25900929adce14fffd729cc8c6fb8 builds before 5efc3ef4758f8d98c257419fa21daca3227de61a; from 86d7182985d25900929adce14fffd729cc8c6fb8 before d7aef29573c7c5cdb2dfad939253287a6329c2a4; 86d7182985d25900929adce14fffd729cc8c6fb8 builds before 3facdecc3fcf115cc4f9b3d8f118d6705e2456a8; from 86d7182985d25900929adce14fffd729cc8c6fb8 before 51075df70c46e60a9773f2dcd28299e40dac36fb; from 86d7182985d25900929adce14fffd729cc8c6fb8 before 02115986d027ade793e7f6be87e91d6a796d0aa3; 86d7182985d25900929adce14fffd729cc8c6fb8 builds before 2bf2d65f76697820dbc4227d13866293576dd90a	CNA record
linux linux_kernel linux:linux_kernel	from 3.10 before 5.10.258; from 5.11 before 5.15.209; from 5.16 before 6.1.175; from 6.2 before 6.6.141; from 6.7 before 6.12.91; from 6.13 before 6.18.33; from 6.19 before 7.0.10	NVD

References

References

https://git.kernel.org/stable/c/c08ab702c4699c6efb9d60bdb15b73e7a627ee7e	patch
https://git.kernel.org/stable/c/2e1ed9a7b6ea5bfefb5d80a02b1c71c7dee1f0dd	patch
https://git.kernel.org/stable/c/5efc3ef4758f8d98c257419fa21daca3227de61a	patch
https://git.kernel.org/stable/c/d7aef29573c7c5cdb2dfad939253287a6329c2a4	patch
https://git.kernel.org/stable/c/3facdecc3fcf115cc4f9b3d8f118d6705e2456a8	patch
https://git.kernel.org/stable/c/51075df70c46e60a9773f2dcd28299e40dac36fb	patch
https://git.kernel.org/stable/c/02115986d027ade793e7f6be87e91d6a796d0aa3	patch
https://git.kernel.org/stable/c/2bf2d65f76697820dbc4227d13866293576dd90a	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.