Riskcovery

CVE-2026-53280

iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done()

State
Published
Severity
Not scored
Published
Jun 26, 2026
Updated
Jun 26, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done()

Local sashiko review pointed it out that group->domain could be NULL when a default domain fails to allocate during the first probe, which can crash at domain->ops->attach_dev dereference in __iommu_attach_device() invoked by pci_dev_reset_iommu_done().

pci_dev_reset_iommu_prepare() is fine as an old_domain pointer can be NULL.

Skip the re-attach in pci_dev_reset_iommu_done() to fix the bug.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c279e83953d937470f8a6e69b69f62608714f13f to before 17194cd0dd236e732d116d50840d795ca50ef196Affected
  • c279e83953d937470f8a6e69b69f62608714f13f to before d769711fcddd005f1e654b3bde547140917fe696Affected
LinuxLinux
  • 7.0Affected
  • before 7.0Not affected
  • 7.0.10 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.