CVE-2026-52953: iommu/vt-d: Fix oops due to out of scope access
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Fix oops due to out of scope access
Below oops triggers when kill QEMU process:
Oops: general protection fault, probably for non-canonical address 0x7fffffff844eaaa7: 0000 [#1] SMP NOPTI Call Trace: <TASK> dorawspinlock+0xaa/0xc0 rawspinlockirqsave+0x21/0x40 domainremovedevpasid+0x52/0x160 intelnestedsetdevpasid+0x1b9/0x1e0 iommusetgrouppasid+0x56/0x120 pcidevresetiommudone+0xe3/0x180 pcieflr+0x65/0x160 pciresetfunctionlocked+0x5b/0x120 vfiopcicoreclosedevice+0x63/0xe0 [vfiopcicore] vfiodfclose+0x4f/0xa0 vfiodfunbindiommufd+0x2d/0x60 vfiodevicefopsrelease+0x3e/0x40 fput+0xe5/0x2c0 taskworkrun+0x58/0xa0 doexit+0x2c8/0x600 dogroupexit+0x2f/0xa0 getsignal+0x863/0x8c0 archdosignalorrestart+0x24/0x100 exittousermodeloop+0x87/0x380 dosyscall64+0x2ff/0x11e0 entrySYSCALL64afterhwframe+0x76/0x7e
The global static blocked domain is a dummy domain without corresponding dmardomain structure, accessing beyond iommudomain structure triggers oops easily. Fix it by return early in domainremovedevpasid() like identity domain.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel (iommu/vt-d)to a version that resolves this vulnerability.Patch Fix oops due to out of scope access
Event History
Frequently Asked Questions
What is the severity of CVE-2026-52953?
The severity of CVE-2026-52953 is rated at 37.
How do I fix CVE-2026-52953?
Fixing CVE-2026-52953 involves patching the Linux kernel to the latest version where the vulnerability has been addressed.
What systems are affected by CVE-2026-52953?
CVE-2026-52953 affects systems running vulnerable versions of the Linux kernel.
What type of vulnerability is CVE-2026-52953?
CVE-2026-52953 is a general protection fault vulnerability related to out of scope access in the iommu/vt-d.
What is the impact of CVE-2026-52953?
The impact of CVE-2026-52953 can lead to system instability or crashes when certain processes like QEMU are executed.