Buffer Size Limit Bypass in Linux Kernel SCSI Generic Module

CVE-2026-53304

What is CVE-2026-53304?

This vulnerability in the Linux kernel's SCSI generic module enables a bypass of the default buffer size limit set by the parameter def_reserved_size. An attacker could exploit this by directly modifying the module parameter to provide invalid values, such as negative numbers, leading to a potential system instability or soft lockup. The kernel's enforcement mechanism, which is designed to limit this size, can be circumvented, resulting in unwanted CPU behavior that may be detrimental to system performance. A fix has been implemented to enforce stricter validations on the def_reserved_size parameter to prevent such exploits.

References