CVE-2026-90387

CVE-2026-90387 affects the Linux kernel 's swiotlb (Software I/O Translation Lookaside Buffer) subsystem. The root cause is that swiotlb_init_io_tlb_pool() reconstructs the pool virtual address from the physical start address using phys_to_virt(). When CONFIG_DMA_DIRECT_REMAP is enabled, the DMA ...