What is CVE-2026-53021?

CVE-2026-53021 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10, classified as a Integer Overflow flaw (CWE-190), affecting Linux kernel versions from 3.10 onward and patched in 5.10.258, 5.15.209, 6.1.175 and others. CVE-2026-53021 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-53021?

CVE-2026-53021 has a CVSS score of 5.5 out of 10, rated Medium severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Is there a patch available for CVE-2026-53021?

Yes, CVE-2026-53021 has been patched. Fixed versions include 5.10.258, 5.15.209, 6.1.175 and others. If you are running Linux kernel 3.10 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2026-53021 actively exploited?

CVE-2026-53021 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is Integer Overflow (CWE-190)?

The product performs a calculation that can produce an integer overflow, leading to unexpected values. See MITRE CWE for full details: https://cwe.mitre.org/data/definitions/190.html

CVE-2026-53021

Medium

In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix integer overflow in UNMAP bounds check sbc_execute_unmap() checks LBA + range does not exceed the device capacity, but does not guard against LBA + range wrapping around on 64-bit overflow. Add an overflow check matching the pattern already used for WRITE_SAME in the same file.

Package Linux Kernel

Published 2026-06-24

Last modified 2026-07-15

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

5.5

out of 10

Medium

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness type

CWE-190

CVE-2026-53021 is a Integer Overflow vulnerability

What is Integer Overflow?

The product performs a calculation that can produce an integer overflow, leading to unexpected values. Learn more on MITRE CWE

Affected versions

Linux kernel versions 3.10 and later are affected. Fixed in 5.10.258, 5.15.209, 6.1.175, 6.6.141, 6.12.91, 6.18.33, 7.0.10, 7.1 and their respective stable series.

Affected from

≥ 3.10

Fixed in

✓ 5.10.258 5.10.x ✓ 5.15.209 5.15.x ✓ 6.1.175 6.1.x ✓ 6.6.141 6.6.x ✓ 6.12.91 6.12.x ✓ 6.18.33 6.18.x ✓ 7.0.10 7.0.x ✓ 7.1

References

8 total

Kernel Git
https://git.kernel.org/stable/c/02115986d027ade793e7f6be87e91d6a796d0aa3

Patch
Kernel Git
https://git.kernel.org/stable/c/2bf2d65f76697820dbc4227d13866293576dd90a

Patch
Kernel Git
https://git.kernel.org/stable/c/2e1ed9a7b6ea5bfefb5d80a02b1c71c7dee1f0dd

Patch
Kernel Git
https://git.kernel.org/stable/c/3facdecc3fcf115cc4f9b3d8f118d6705e2456a8

Patch
Kernel Git
https://git.kernel.org/stable/c/51075df70c46e60a9773f2dcd28299e40dac36fb

Patch

Showing 5 of 8 references View all on NVD

Details

CVE ID CVE-2026-53021

Severity Medium

CVSS score 5.5 / 10

CVSS version 3.1

Published 2026-06-24

Modified 2026-07-15

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2026-53021?

CVE-2026-53021 is a Medium severity Linux kernel vulnerability with a CVSS score of 5.5 out of 10 , classified as an Integer Overflow flaw (CWE-190) . It affects Linux kernel versions from 3.10 onward and has been patched in 5.10.258, 5.15.209, 6.1.175 and others. CVE-2026-53021 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2026-53021?

CVE-2026-53021 has a CVSS score of 5.5 out of 10, rated Medium severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Is there a patch available for CVE-2026-53021?

Yes. CVE-2026-53021 has been patched. Fixed versions include 5.10.258, 5.15.209, 6.1.175 and others. If you are running Linux kernel 3.10 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2026-53021 actively exploited?

No. CVE-2026-53021 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.