CVE-2026-72018dibs: loopback: validate offset and size in move_data()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: dibs: loopback: validate offset and size in move_data() The loopback move_data() performs a memcpy into the registered DMB without checking whether offset + size exceeds the DMB length. Unlike real ISM hardware, which enforces memory region bounds natively, the software loopback has no such protection. A peer-supplied out-of-bounds offset or oversized write would result in an OOB write past the allocated kernel buffer. Add an explicit bounds check before the memcpy to reject such requests with -EINVAL.
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-787
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from f7a22071dbf316c982fb44308874bd7ad9ac2091 before ee188a6b264b71315a67f1b9470faad308b730d2; from f7a22071dbf316c982fb44308874bd7ad9ac2091 before b2f426a9a22886071966432ede8fceafffe12b8c; from f7a22071dbf316c982fb44308874bd7ad9ac2091 before 94fe0ab01b480b52bd8f977edbd845ef375d69fd; from f7a22071dbf316c982fb44308874bd7ad9ac2091 before 78237e3c0720fcc6eb9b87e90fd70f63eeca886f | CNA record |
References
- https://git.kernel.org/stable/c/ee188a6b264b71315a67f1b9470faad308b730d2
- https://git.kernel.org/stable/c/b2f426a9a22886071966432ede8fceafffe12b8c
- https://git.kernel.org/stable/c/94fe0ab01b480b52bd8f977edbd845ef375d69fd
- https://git.kernel.org/stable/c/78237e3c0720fcc6eb9b87e90fd70f63eeca886f
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.