In the Linux kernel, the following vulnerability has been resolved:

scsi: target: core: Fix integer overflow in UNMAP bounds check

sbc_execute_unmap() checks LBA + range does not exceed the device capacity,
but does not guard against LBA + range wrapping around on 64-bit overflow.

Add an overflow check matching the pattern already used for WRITE_SAME in
the same file.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
86d7182985d25900929adce14fffd729cc8c6fb8 affected < c08ab702c4699c6efb9d60bdb15b73e7a627ee7e
86d7182985d25900929adce14fffd729cc8c6fb8 affected < 2e1ed9a7b6ea5bfefb5d80a02b1c71c7dee1f0dd
86d7182985d25900929adce14fffd729cc8c6fb8 affected < 5efc3ef4758f8d98c257419fa21daca3227de61a
86d7182985d25900929adce14fffd729cc8c6fb8 affected < d7aef29573c7c5cdb2dfad939253287a6329c2a4
86d7182985d25900929adce14fffd729cc8c6fb8 affected < 3facdecc3fcf115cc4f9b3d8f118d6705e2456a8
86d7182985d25900929adce14fffd729cc8c6fb8 affected < 51075df70c46e60a9773f2dcd28299e40dac36fb
86d7182985d25900929adce14fffd729cc8c6fb8 affected < 02115986d027ade793e7f6be87e91d6a796d0aa3
86d7182985d25900929adce14fffd729cc8c6fb8 affected < 2bf2d65f76697820dbc4227d13866293576dd90a
Linux Linux affected
Version Status Constraints
3.10 affected —
0 unaffected < 3.10
5.10.258 unaffected ≤ 5.10.*
5.15.209 unaffected ≤ 5.15.*
6.1.175 unaffected ≤ 6.1.*
6.6.141 unaffected ≤ 6.6.*
6.12.91 unaffected ≤ 6.12.*
6.18.33 unaffected ≤ 6.18.*
7.0.10 unaffected ≤ 7.0.*
7.1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/02115986d027ade793e7f6be87e91d6a796d0aa3 cve-icon
https://git.kernel.org/stable/c/2bf2d65f76697820dbc4227d13866293576dd90a cve-icon
https://git.kernel.org/stable/c/2e1ed9a7b6ea5bfefb5d80a02b1c71c7dee1f0dd cve-icon
https://git.kernel.org/stable/c/3facdecc3fcf115cc4f9b3d8f118d6705e2456a8 cve-icon
https://git.kernel.org/stable/c/51075df70c46e60a9773f2dcd28299e40dac36fb cve-icon
https://git.kernel.org/stable/c/5efc3ef4758f8d98c257419fa21daca3227de61a cve-icon
https://git.kernel.org/stable/c/c08ab702c4699c6efb9d60bdb15b73e7a627ee7e cve-icon
https://git.kernel.org/stable/c/d7aef29573c7c5cdb2dfad939253287a6329c2a4 cve-icon
History

Wed, 24 Jun 2026 17:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix integer overflow in UNMAP bounds check sbc_execute_unmap() checks LBA + range does not exceed the device capacity, but does not guard against LBA + range wrapping around on 64-bit overflow. Add an overflow check matching the pattern already used for WRITE_SAME in the same file.
Title scsi: target: core: Fix integer overflow in UNMAP bounds check
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-06-24T16:29:30.671Z

Reserved: 2026-06-09T07:44:35.379Z

Link: CVE-2026-53021

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.