CVE-2026-74573

In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE armvsmmuvsidtosid maps a guest's vSID to a single physical Stream ID taken from master-streams0, assuming a device has exactly one stream. A device with sever...

CVE-2026-74573

Concise summary: CVE-2026-74573 affects the Linux kernel IOMMU arm-smmu-v3-iommufd. The vulnerability arises when a vDEVICE is mapped to more than one stream: arm_vsmmu_vsid_to_sid() uses only master->streams[0], so guests with multiple streams may not invalidate all ATC/IOTLB entries; if ther...

kernel: Linux kernel: vhost-vdpa memory leak leading to Denial of Service

A flaw was found in the Linux kernel's vhost-vdpa component. This memory leak vulnerability occurs when an application using vhost-vdpa fails to properly invalidate I/O Translation Lookaside Buffer IOTLB entries or crashes. A local attacker or application could exploit this flaw, leading to memor...