CVE-2026-64153 drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix iommumapsgtable return value check and avoid WARN Commit "iommu: return full error code from iommumapsgatomic" changed iommumapsgtable to return an ssizet and negative values in error cases, rather than a sizet and a...

CVE-2026-64153

In the Linux kernel drm/msm area, CVE-2026-64153 covers a fix for iommu_map_sgtable() return value handling. The underlying issue arose after a patch changed iommu_map_sg_atomic to return a signed size (ssize_t) and to emit negative values on error, instead of using size_t with zero. Consequently...

CVE-2026-53280

A flaw was found in the Linux kernel's Input-Output Memory Management Unit IOMMU component. This vulnerability occurs when a default IOMMU domain fails to allocate during the initial probe, leading to a NULL pointer dereference. This can cause a system crash, resulting in a Denial of Service DoS...

UBUNTU-CVE-2026-53280

In the Linux kernel, the following vulnerability has been resolved: iommu: Fix NULL group-domain dereference in pcidevresetiommudone Local sashiko review pointed it out that group-domain could be NULL when a default domain fails to allocate during the first probe, which can crash at...

CVE-2026-53280

In the Linux kernel, the following vulnerability has been resolved: iommu: Fix NULL group-domain dereference in pcidevresetiommudone Local sashiko review pointed it out that group-domain could be NULL when a default domain fails to allocate during the first probe, which can crash at...

Unbreakable Enterprise kernel security update: Copy Fail

5.15.0-319.201.4.4 - crypto: algifaead - Fix minimum RX size check for decryption Herbert Xu Orabug: 39291961 - crypto: afalg - Fix page reassignment overflow in afalgpulltsgl Herbert Xu Orabug: 39291961 - crypto: authencesn - Fix src offset when decrypting in-place Herbert Xu Orabug: 39291961 -...

The vulnerability of the mtk_iommu_probe_device() function in the drivers/iommu/mtk_iommu.c module of the Linux kernel’s IOMMU support driver allows a hacker to cause a service failure.

The vulnerability of the mtkiommuprobedevice function in the drivers/iommu/mtkiommu.c file of the Linux IOMMU driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mtk_iommu_remove() function in the drivers/iommu/mtk_iommu.c module of the Linux kernel’s IOMMU support driver allows a attacker to cause a service failure.

The vulnerability of the mtkiommuremove function in the drivers/iommu/mtkiommu.c module of the Linux kernel’s IOMMU support driver exposes confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-71202

In the Linux kernel, the following vulnerability has been resolved: iommu/sva: invalidate stale IOTLB entries for kernel address space Introduce a new IOMMU interface to flush IOTLB paging cache entries for the CPU kernel address space. This interface is invoked from the x86 architecture code tha...

CVE-2022-50851 vhost_vdpa: fix the crash in unmap a large memory

In the Linux kernel, the following vulnerability has been resolved: vhostvdpa: fix the crash in unmap a large memory While testing in vIOMMU, sometimes Guest will unmap very large memory, which will cause the crash. To fix this, add a new function vhostvdpageneralunmap. This function will only...

The vulnerability of the has_external_pci() function in the drivers/iommu/intel/iommu.c file of the Linux kernel’s IOMMU support module allows a attacker to cause a service failure.

The vulnerability of the hasexternalpci function in the drivers/iommu/intel/iommu.c file of the Linux kernel’s IOMMU support module is related to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could allow an attacker to cause a service failu...

CVE-2022-50525 iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()

In the Linux kernel, the following vulnerability has been resolved: iommu/fslpamu: Fix resource leak in fslpamuprobe The fslpamuprobe returns directly when createcsd failed, leaving irq and memories unreleased. Fix by jumping to error if createcsd returns error...

The vulnerability of the iommu_copy_struct_from_user() function in the iommu component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the iommucopystructfromuser function in the iommu component of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2025-37198

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.15.0-03037-gaacc73ceeb8b Description: A flaw exists in the Linux kernel's IOMMU subsystem, specifically within the ARM SMU Qualcomm component. The vulnerability stems from a missing workaround for the SM6115...

CVE-2025-37900

CVE-2025-37900: In the Linux kernel, two issues in iommu_copy_struct_from_user() were fixed in the current header; review noted NULL pointer handling in iommu_copy_struct_to_user() and a related typo. Connected advisories/entries confirm this CVE is included among kernel fixes across distribution...

CVE-2024-56668

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix qibatch NULL pointer with nested parent domain The qibatch is allocated when assigning cache tag for a domain. While for nested parent domain, it is missed. Hence, when trying to map pages to the nested parent, NU...

kernel: iommu: Fix potential use-after-free during probe

A vulnerability was found in the Linux kernel's IOMMU driver, where the deviommufree function can lead to a use-after-free error. This occurs when a device probe fails while simultaneously accessing dev-iommu-fwspec in the ofiommuconfigure path. As a result, this vulnerability can potentially cau...