Riskcovery

CVE-2026-64151

iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap

State
Published
Severity
8.4 High
Published
Jul 19, 2026
Updated
Aug 5, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap

Sashiko pointed out that the driver could drop PAGE_SIZE from the pgsize_bitmap. That is technically allowed but nothing does it, and such an iommu_domain would not be used with the DMA API today.

Still, it is against the design and it is trivial to fix up. Lift the PT_WARN_ON to the if branch and just skip the fast path.

Scores

CVSSScoreVectorSource
3.18.4 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:NLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • dcd6a011a8d523a114af2360a8753de5bd60c139 to before 00850f41da24423587abd6124a790dd4f12bcef3Affected
  • dcd6a011a8d523a114af2360a8753de5bd60c139 to before 8ef3f77c440005c7f04229a75976bfc078364247Affected
LinuxLinux
  • 6.19Affected
  • before 6.19Not affected
  • 7.0.11 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.