CVE-2026-72018

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds write issue exists in the software loopback implementation of the dibs module. The move data() function performs a memory copy into the registered Device Memory Buffer (DMB) without verifying if the sum of the offset and size exceeds the DMB length. Because the software loopback lacks the native memory region bound enforcement found in real ISM hardware, a peer-supplied out-of-bounds offset or an oversized write can lead to memory corruption past the allocated kernel buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.