CVE-2026-53371

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the RDMA ionic driver where the node desc array within the ib device structure is not guaranteed to be NUL-terminated. This occurs because the node desc store() function performs a raw memory copy of up to 64 bytes without ensuring a terminating NUL byte. When exactly 64 bytes are written to the node desc sysfs file, the hca type show() function uses an unbounded %s format specifier, leading to an out-of-bounds read into adjacent fields of the ib device structure. This condition can be triggered by userspace through the IB DEVICE MODIFY NODE DESC functionality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.