CVE-2026-64151
- Source
- https://cve.org/CVERecord?id=CVE-2026-64151
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64151.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-64151
- Downstream
- Published
- 2026-07-19T15:40:40.643Z
- Modified
- 2026-07-22T05:29:59.104744275Z
- Severity
-
- 8.4 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N CVSS Calculator
- Summary
- iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
iommupt: Check for missing PAGESIZE in the pgsizebitmap
Sashiko pointed out that the driver could drop PAGESIZE from the pgsizebitmap. That is technically allowed but nothing does it, and such an iommu_domain would not be used with the DMA API today.
Still, it is against the design and it is trivial to fix up. Lift the PTWARNON to the if branch and just skip the fast path.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64151.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/00850f41da24423587abd6124a790dd4f12bcef3
- https://git.kernel.org/stable/c/8ef3f77c440005c7f04229a75976bfc078364247
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64151.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-64151
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git