Riskcovery

CVE-2026-89453

iommu/amd: Put PCI device after handling PPR faults

State
Published
Severity
Not scored
Published
Sep 11, 2026
Updated
Oct 19, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

iommu/amd: Put PCI device after handling PPR faults

iommu_call_iopf_notifier() looks up the requester with pci_get_domain_bus_and_slot(), which returns a PCI device with its reference count incremented.

Neither the successful iommu_report_device_fault() path nor the abort path drops that reference, so every handled PPR request leaks a PCI device reference.

This is the same ownership rule that was fixed for the old iommu_v2 ppr_notifier() path by commit 6cf0981c2233 ("iommu/amd: Fix pci device refcount leak in ppr_notifier()"), but iommu_call_iopf_notifier() was added later as a separate PPR/IOPF notifier path.

Drop the PCI device reference after handling the PPR entry.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 978d626b8f1a239acc635323d731c77eae54eb61 to before 1de4443f85e4405af00153cdf8ba73ff12a65036Affected
  • 978d626b8f1a239acc635323d731c77eae54eb61 to before cfc5c1b2caa176dfd40b873a6ff07b11da34cc3eAffected
  • 978d626b8f1a239acc635323d731c77eae54eb61 to before d1470e16c1977e6c94fadf6048deafaa4d150fecAffected
  • 978d626b8f1a239acc635323d731c77eae54eb61 to before af3b69b16383fbc8fe5f61b5b0150d2e41ede71fAffected
LinuxLinux
  • 6.10Affected
  • before 6.10Not affected
  • 6.12.109 through 6.12.*Not affected
  • 6.18.50 through 6.18.*Not affected
  • 7.2.4 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.