Riskcovery

CVE-2026-92505

iommu/amd: Fix undefined behavior in devid_write debugfs function

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 19, 2026
Reserved
Sep 16, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

iommu/amd: Fix undefined behavior in devid_write debugfs function

When for_each_pci_segment() loop completes without finding a matching segment, the pci_seg pointer is not NULL but points to an invalid memory location (the list head). Accessing pci_seg->id after the loop causes undefined behavior.

Fix this by handling the successful case inside the loop and returning -EINVAL after the loop if no matching segment is found.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2e98940f123d9c69d4759078aea9a536244c98d3 to before 8aabe0fba01486b5d893e708b05a8fa7f1b7efbbAffected
  • 2e98940f123d9c69d4759078aea9a536244c98d3 to before 99d42aef089a07cfb1d404a7227ac9dc7628b497Affected
  • 2e98940f123d9c69d4759078aea9a536244c98d3 to before 843e149989665f8309ad2efe6048dc76591e1f94Affected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.18.52 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.