PT-2026-61469 · Linux · Linux

CVE-2026-64152 · Published 2026-07-19 · Updated 2026-07-19

Mitre

CVSS v3.1

7.8

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

In the Linux kernel, the following vulnerability has been resolved:

iommu: Handle unmap error when iommu debug is enabled

Sashiko noticed a latent bug where the map error flow called iommu unmap() which calls iommu debug unmap begin()/iommu debug unmap end() however since this is an error path the map flow never actually established the original iommu debug map() it will malfunction.

Lift the unmap error handling into iommu map nosync() and reorder it so the trace map()/iommu debug map() records the partial mapping and then immediately unmaps it. This avoid creating the unbalanced tracking and provides saner tracing instead of a unmap unmatched to any map.

Fix

Related Identifiers

CVE-2026-64152

Affected Products

Linux

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-64152 · Security Note
• https://git.kernel.org/stable/c/0735c54804c709d1b292f3b6947cfb560b2ce552 · Note
• https://git.kernel.org/stable/c/0cd028806efc148a75d4acf711d21db335a89661 · Note