CVE-2026-64151: iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap
In the Linux kernel, the following vulnerability has been resolved:
iommupt: Check for missing PAGESIZE in the pgsizebitmap
Sashiko pointed out that the driver could drop PAGESIZE from the pgsizebitmap. That is technically allowed but nothing does it, and such an iommudomain would not be used with the DMA API today.
Still, it is against the design and it is trivial to fix up. Lift the PTWARNON to the if branch and just skip the fast path.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64151?
CVE-2026-64151 has a severity rating of high, with a CVSS score of 8.4.
How do I fix CVE-2026-64151?
To fix CVE-2026-64151, update the Linux kernel to the latest patched version as released by the maintainers.
What systems are affected by CVE-2026-64151?
CVE-2026-64151 affects the Linux kernel, particularly systems utilizing the iommupt driver.
What is the impact of CVE-2026-64151?
CVE-2026-64151 can lead to potential denial of service or privilege escalation if exploited.
When was CVE-2026-64151 published?
CVE-2026-64151 was published on July 19, 2026.