CVE-2026-23067

An integer signedness bug was found in the Linux kernel's ARM IOMMU page table implementation. The armlpaeunmap function returns sizet unsigned but was returning -ENOENT negative error code on error. The negative value becomes a huge positive number 0xFFFFFFFFFFFFFFFE on 64-bit which propagates...

DEBIAN-CVE-2026-23067

In the Linux kernel, the following vulnerability has been resolved: iommu/io-pgtable-arm: fix sizet signedness bug in unmap path armlpaeunmap returns sizet but was returning -ENOENT negative error code when encountering an unmapped PTE. Since sizet is unsigned, -ENOENT typically -2 becomes a huge...

CVE-2026-23067

In the Linux kernel, the following vulnerability has been resolved: iommu/io-pgtable-arm: fix sizet signedness bug in unmap path armlpaeunmap returns sizet but was returning -ENOENT negative error code when encountering an unmapped PTE. Since sizet is unsigned, -ENOENT typically -2 becomes a huge...