UBUNTU-CVE-2026-53053: High severity ubuntu/linux-hwe-edge vulnerability
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix clonealias() to use the original device's devid Currently clonealias() assumes first argument (pdev) is always the original device pointer. This function is called by pciforeachdmaalias() which based on topology decides to send original or alias device details in first argument. This meant that the source devid used to look up and copy the DTE may be incorrect, leading to wrong or stale DTE entries being propagated to alias device. Fix this by passing the original pdev as the opaque data argument to both the direct clonealias() call and pciforeachdmaalias(). Inside clonealias(), retrieve the original device from data and compute devid from it.
Affected Software
Event History
Frequently Asked Questions
Which Ubuntu kernel packages are identified as affected?
The affected software list includes ubuntu/linux, ubuntu/linux-aws, ubuntu/linux-azure, ubuntu/linux-azure-fde, ubuntu/linux-gcp, ubuntu/linux-oracle, ubuntu/linux-raspi, and ubuntu/linux-realtime.
What level of access would an attacker need?
The CVSS vector indicates local access and low privileges are required. No user interaction is required.
What is the potential impact if exploited?
The vulnerability is rated high severity with a CVSS score of 8.8. The vector indicates high confidentiality, integrity, and availability impact, with scope changed.