CVE-2026-53021
Description
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: core: Fix integer overflow in UNMAP bounds check
sbc_execute_unmap() checks LBA + range does not exceed the device capacity,
but does not guard against LBA + range wrapping around on 64-bit overflow.
Add an overflow check matching the pattern already used for WRITE_SAME in
the same file.
Summary dbcve.org
Integer overflow vulnerability in sbc_execute_unmap() within the Linux kernel's SCSI target subsystem. The function validates that LBA + range does not exceed device capacity but fails to prevent 64-bit integer overflow where LBA + range wraps around, potentially allowing out-of-bounds memory access. The fix adds an overflow check following the same pattern already implemented for WRITE_SAME in the same file.
Mitigation
Apply the kernel patch that adds overflow validation to prevent LBA + range from wrapping on 64-bit overflow, as the vulnerability has been resolved in the upstream kernel.