עברית

Vulnerability Intelligence

CVE-2026-64151

High 8.4

Published
Last modified
NVD status
Analyzed

Description

In the Linux kernel, the following vulnerability has been resolved: iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap Sashiko pointed out that the driver could drop PAGE_SIZE from the pgsize_bitmap. That is technically allowed but nothing does it, and such an iommu_domain would not be used with the DMA API today. Still, it is against the design and it is trivial to fix up. Lift the PT_WARN_ON to the if branch and just skip the fast path.

Affected products

linux: linux kernel

References2

Metrics

CVSS 3.1
8.4 HIGH Score source: CNA CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
EPSS — exploit probability
0% percentile: 6 · as of 14 November 2026

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.