What is CVE-2026-53133?

CVE-2026-53133 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10, classified as a Incorrect Conversion Between Numeric Types flaw (CWE-681), affecting Linux kernel versions from 5.2 onward and patched in 5.10.259, 5.15.210, 6.1.176 and others. CVE-2026-53133 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-53133?

CVE-2026-53133 has a CVSS score of 7.8 out of 10, rated High severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Is there a patch available for CVE-2026-53133?

Yes, CVE-2026-53133 has been patched. Fixed versions include 5.10.259, 5.15.210, 6.1.176 and others. If you are running Linux kernel 5.2 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2026-53133 actively exploited?

CVE-2026-53133 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is Incorrect Conversion Between Numeric Types (CWE-681)?

The product converts from one data type to another but uses a function that can produce incorrect results. See MITRE CWE for full details: https://cwe.mitre.org/data/definitions/681.html

CVE-2026-53133

High

In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Fix truncation for block sizes >= 4G When the iommu is used the linearization of the mapping can give a single block that is very large split across multiple SG entries. When __rdma_block_iter_next() reassembles the split SG entries it is overflowing the 32 bit stack values and computed the wrong DMA addresses for blocks after the truncation. Use the right types to hold DMA addresses.

Package Linux Kernel

Published 2026-06-25

Last modified 2026-07-07

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

7.8

out of 10

High

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness type

CWE-681

CVE-2026-53133 is a Incorrect Conversion Between Numeric Types vulnerability

What is Incorrect Conversion Between Numeric Types?

The product converts from one data type to another but uses a function that can produce incorrect results. Learn more on MITRE CWE

Affected versions

Linux kernel versions 5.2 and later are affected. Fixed in 5.10.259, 5.15.210, 6.1.176, 6.6.143, 6.12.94, 6.18.36, 7.0.13, 7.1 and their respective stable series.

Affected from

≥ 5.2

Fixed in

✓ 5.10.259 5.10.x ✓ 5.15.210 5.15.x ✓ 6.1.176 6.1.x ✓ 6.6.143 6.6.x ✓ 6.12.94 6.12.x ✓ 6.18.36 6.18.x ✓ 7.0.13 7.0.x ✓ 7.1

References

8 total

Kernel Git
https://git.kernel.org/stable/c/15fe76e23615f502d051ef0768f86babaf08746c

Patch
Kernel Git
https://git.kernel.org/stable/c/2ff4b7817e5b78070c30f5fb5e678e452a2628b3

Patch
Kernel Git
https://git.kernel.org/stable/c/8fe0231adebe086c8a459c790944ac026cd99c6e

Patch
Kernel Git
https://git.kernel.org/stable/c/ac1aad8e1281534ce936c250f68084fc79c5469e

Patch
Kernel Git
https://git.kernel.org/stable/c/afd35fec9297195b759078745549c2671223f24f

Patch

Showing 5 of 8 references View all on NVD

Details

CVE ID CVE-2026-53133

Severity High

CVSS score 7.8 / 10

CVSS version 3.1

Published 2026-06-25

Modified 2026-07-07

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2026-53133?

CVE-2026-53133 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10 , classified as an Incorrect Conversion Between Numeric Types flaw (CWE-681) . It affects Linux kernel versions from 5.2 onward and has been patched in 5.10.259, 5.15.210, 6.1.176 and others. CVE-2026-53133 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2026-53133?

CVE-2026-53133 has a CVSS score of 7.8 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Is there a patch available for CVE-2026-53133?

Yes. CVE-2026-53133 has been patched. Fixed versions include 5.10.259, 5.15.210, 6.1.176 and others. If you are running Linux kernel 5.2 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2026-53133 actively exploited?

No. CVE-2026-53133 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.