CVE-2025-38676

CVE-2025-38676 — Linux Kernel ≤ 6.17-rc2 AMD IOMMU stack buffer overflow This repo provides safe, non-exploit PoC resources to study CVE-2025-38676: Info-gathering + safety tools QEMU boot harness to exercise long kernel cmdline permutations Hardening guidance GRUB/UEFI/Secure Boot; baseline...

CVE-2026-98003

A flaw was found in the Linux kernel's AMD Input-Output Memory Management Unit IOMMU driver. When the system resumes from sleep, the driver reallocates internal logging buffers without releasing previously allocated memory and performs memory requests in an invalid context. A local user with powe...

CVE-2026-98002

A flaw was found in the Linux kernel's AMD IOMMU Input-Output Memory Management Unit driver. This flaw allows a local user to cause a Denial of Service DoS or system instability during nested domain allocation. When domain identifiers or memory resources are exhausted, an allocation error value i...

PT-2026-98665

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An ineffective error check exists in the nested domain allocation process. The function amd iommu pdom id alloc returns an integer representing a domain ID on success or a negative error...

PT-2026-94813

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the devid write debugfs function within the AMD IOMMU driver. When the for each pci segment loop finishes without finding a matching segment, the pci seg pointer point...

kernel: iommu/amd: Fix clone_alias() to use the original device's devid

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit AMD driver. The clonealias function incorrectly uses the device ID devid when handling alias devices. This can lead to the propagation of wrong or stale Device Table Entry DTE entries to alias devices, potentially...

CVE-2026-89453

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit driver for AMD. This vulnerability occurs when the system handles certain memory access errors, specifically Page Request PPR faults, without properly releasing a reference to a PCI device. This oversight causes a...

CVE-2026-89453

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Put PCI device after handling PPR faults iommucalliopfnotifier looks up the requester with pcigetdomainbusandslot, which returns a PCI device with its reference count incremented. Neither the successful...

DEBIAN-CVE-2026-89453

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Put PCI device after handling PPR faults iommucalliopfnotifier looks up the requester with pcigetdomainbusandslot, which returns a PCI device with its reference count incremented. Neither the successful...

CVE-2026-89453

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Put PCI device after handling PPR faults iommucalliopfnotifier looks up the requester with pcigetdomainbusandslot, which returns a PCI device with its reference count incremented. Neither the successful...

UBUNTU-CVE-2026-89453

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Put PCI device after handling PPR faults iommucalliopfnotifier looks up the requester with pcigetdomainbusandslot, which returns a PCI device with its reference count incremented. Neither the successful...

EUVD-2026-76359

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Put PCI device after handling PPR faults iommucalliopfnotifier looks up the requester with pcigetdomainbusandslot, which returns a PCI device with its reference count incremented. Neither the successful...

CVE-2026-89453 iommu/amd: Put PCI device after handling PPR faults

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Put PCI device after handling PPR faults iommucalliopfnotifier looks up the requester with pcigetdomainbusandslot, which returns a PCI device with its reference count incremented. Neither the successful...

CVE-2026-89453

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Put PCI device after handling PPR faults iommucalliopfnotifier looks up the requester with pcigetdomainbusandslot, which returns a PCI device with its reference count incremented. Neither the successful...

PT-2026-90169

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/amd component where PCI device references are leaked during the handling of PPR Page Request Interface faults. The iommu call iopf notifier function uses pci...

kernel: iommu/amd: Fix clone_alias() to use the original device's devid

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit AMD driver. The clonealias function incorrectly uses the device ID devid when handling alias devices. This can lead to the propagation of wrong or stale Device Table Entry DTE entries to alias devices, potentially...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098984)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098984 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/amd: move waitonsem out of spinlock With iommu.strict=1, the existing completion wait path...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098714)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098714 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/amd/pgtbl: Fix possible race while increase page table level The AMD IOMMU host page table...

ROS-20260821-73-0045

The vulnerability of the putpasidstate function in the drivers/iommu/amd/iommuv2.c file of the Linux kernel’s IOMMU driver is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-68347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix IRQ unsafe locking in gdom allocation Lockdep complains: 259.410489...