Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-90388

iommu/dma: Check atomic pool allocation result directly

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.9, 5.10.270, 5.15.221, 6.1.188, 6.6.157, and 3 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: iommu/dma: Check atomic pool allocation result directly The non-blocking, non-coherent allocation path uses dma_alloc_from_pool(), which returns the allocated page and fills cpu_addr only on success. Do not rely on cpu_addr to detect allocation failure in this path. Check the returned page directly before using it for the IOMMU mapping.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 9420139f516d7fbc248ce17f35275cb005ed98ea · fixed in ac9cd0a669b8be5d178dbd471b0d68039dac58b5; From 9420139f516d7fbc248ce17f35275cb005ed98ea · fixed in db46cb9da83a507d86d2bb080bdb09c865da3d0a; From 9420139f516d7fbc248ce17f35275cb005ed98ea · fixed in d56c3f955b21e5764c1497e295a5b5d0b3a40470; From 9420139f516d7fbc248ce17f35275cb005ed98ea · fixed in 06dffc96693083dda3412311406e558cf27f1574; From 9420139f516d7fbc248ce17f35275cb005ed98ea · fixed in a4ace31d732b657d774e31fb444c0c27d42c78e5; From 9420139f516d7fbc248ce17f35275cb005ed98ea · fixed in fb0b39287ba894dbdfac2901c51788b63f5c2291; From 9420139f516d7fbc248ce17f35275cb005ed98ea · fixed in 8c486293ddd0af60991408149fc3e964ea888dc4; From 9420139f516d7fbc248ce17f35275cb005ed98ea · fixed in af95a0ebc0a0db0762be75f51eadf770bad01aaa; From 5.8.6 · fixed in 5.9

  • Linux Linux

    5.9

  • KernelLinux

    From 5.9.0 · fixed in 5.10.270; From 5.11.0 · fixed in 5.15.221; From 5.16.0 · fixed in 6.1.188; From 6.2.0 · fixed in 6.6.157; From 6.7.0 · fixed in 6.12.110; From 6.13.0 · fixed in 6.18.52; From 6.19.0 · fixed in 7.2.6

References 8

git.kernel.org