CVE-2026-64153

drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN

State: Published
Severity: 8.8 High
Published: Jul 19, 2026
Updated: Aug 5, 2026
Reserved: Jul 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN

Commit "iommu: return full error code from iommu_map_sg[_atomic]()" changed iommu_map_sgtable() to return an ssize_t and negative values in error cases, rather than a size_t and a zero.

Store the return value in the appropriate type and in case of error, return it rather than WARNing.

Patchwork: https://patchwork.freedesktop.org/patch/719685/

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b to before 3c2cdb7c07f664b77e2a75b50793b845d5742efaAffected ad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b to before 3e3c3c95ef4fe17231a9149e27bcfc9dae2dd89fAffected ad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b to before 7256e54583aee21e23929e7554278c2f5c1a08b1Affected ad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b to before 3457807aeb88077712f0a7cb65c3ca5120773d75Affected ad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b to before f4e37f3df436c2bdd2621c21f9c72c8f149a221dAffected ad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b to before 3a45af37733446e114bf19b0209fe7d8089bdb8bAffected ad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b to before 55e0f0d1c1a4ee1e46da7da4d443eb3044fb3851Affected
LinuxLinux	5.15Affected before 5.15Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.142 through 6.6.Not affected 6.12.92 through 6.12.Not affected 6.18.34 through 6.18.Not affected 7.0.11 through 7.0.Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

ad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b to before 3c2cdb7c07f664b77e2a75b50793b845d5742efaAffected
ad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b to before 3e3c3c95ef4fe17231a9149e27bcfc9dae2dd89fAffected
ad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b to before 7256e54583aee21e23929e7554278c2f5c1a08b1Affected
ad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b to before 3457807aeb88077712f0a7cb65c3ca5120773d75Affected
ad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b to before f4e37f3df436c2bdd2621c21f9c72c8f149a221dAffected
ad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b to before 3a45af37733446e114bf19b0209fe7d8089bdb8bAffected
ad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b to before 55e0f0d1c1a4ee1e46da7da4d443eb3044fb3851Affected

LinuxLinux

5.15Affected
before 5.15Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.142 through 6.6.*Not affected
6.12.92 through 6.12.*Not affected
6.18.34 through 6.18.*Not affected
7.0.11 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.