ROS-20260918-73-0126

The vulnerability of the iommusvabinddevice function in the drivers/iommu/iommu-sva.c file of the Linux IOMMU driver relates to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-89448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detectinteliommu don't include tboot, leading to a possible...

Linux IOMMU Driver Heap Buffer Overflow DoS

The vulnerability of the domainremovedevpasid function in the drivers/iommu/intel/iommu.c file of the Linux operating system’s IOMMU driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

Linux IOMMU Heap Buffer Overflow DoS

The vulnerability of the iommugroupsetdomaininternal function in the drivers/iommu/iommu.c file of the Linux operating system’s IOMMU driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux IOMMU Heap Buffer Overflow DoS

The vulnerability of the armlpaeunmap function in the drivers/iommu/io-pgtable-arm.c file of the Linux operating system’s IOMMU driver is related to insufficient validation of data authenticity. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux IOMMU Heap Buffer Overflow DoS

The vulnerability of the iommusvaunbinddevice function in the drivers/iommu/iommu-sva.c module of the Linux IOMMU driver relates to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

Linux IOMMU Driver Use-After-Free

The vulnerability of the iommuallocmmdata function in the drivers/iommu/iommu-sva.c module of the Linux IOMMU driver is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected informatio...

Linux IOMMU Kernel Driver Heap Buffer Overflow DoS

The vulnerability of the batchclearcarry function in the drivers/iommu/iommufd/pages.c file of the Linux kernel’s IOMMU driver is related to errors during the update of the reference counters. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux IOMMU Heap Buffer Overflow DoS

The vulnerability of the iommugroupalloc function in the drivers/iommu/iommu.c module of the Linux IOMMU driver is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux IOMMU Kernel Driver Heap Buffer Overflow DoS

The vulnerability of the tegra241cmdqvinitstructures function in the drivers/iommu/arm/arm-smmu-v3/tegra241-cmdqv.c file of the Linux operating system’s IOMMU kernel is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37927)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37927 advisory. - In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix potential buffer overflow...

Linux IOMMU DoS

The vulnerability of the drivers/iommu/intel/iommu.c, rivers/iommu/intel/iommu.h, and drivers/iommu/intel/nested.c modules in the Linux operating system arises from the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause ...

CVE-2025-40155

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: debugfs: Fix legacy mode page table dump logic In legacy mode, SSPTPTR is ignored if TT is not 00b or 01b. SSPTPTR maybe uninitialized or zero in that case and may cause oops like: Oops: general protection fault,...

mtk_iommu_hw_init IOMMU Compromise

The vulnerability of the mtkiommuhwinit function in the drivers/iommu/mtkiommu.c module – Linux’s IOMMU kernel support driver is vulnerable due to the use of the NULL pointer assignment. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux iommu/arm-smmu DoS

The vulnerability of the iommu/arm-smmu components of the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...