PT-2026-52260 · Linux · Linux

Published

2026-06-25

·

Updated

2026-06-25

·

CVE-2026-53164

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
iommu/dma: Do not try to iommu map a 0 length region in swiotlb
iommu dma iova link swiotlb() processes a mapping that is unaligned in three parts, the head, middle and trailer. If the middle is empty because there are no aligned pages it will call down to iommu map() with a 0 size which the iommupt implementation will fail as illegal.
It then tries to do an error unwind and starts from the wrong spot corrupting the mapping so the eventual destruction triggers a WARN ON.
Check for 0 length and avoid mapping and use offset not 0 as the starting point to unlink.
This is frequently triggered by using some kinds of thunderbolt NVMe drives that trigger forced SWIOTLB for unaligned memory. NVMe seems to pass in oddly aligned buffers for the passthrough commands from smartctl that hit this condition.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-53164

Affected Products

Linux