Bug 2502180 (CVE-2026-53372)
| Summary: | CVE-2026-53372 kernel: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | rhel-process-autobot, watson-tool-maintainers |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in the Linux kernel's Input/Output Memory Management Unit (IOMMU) subsystem. This vulnerability arises in virtualized environments when a nested domain attempts to attach to a Process Address Space ID (PASID), a mechanism for devices to access memory, while its parent domain is configured for dirty page tracking. The kernel lacks proper dirty tracking support for the nested domain in this scenario, leading to a failure in attachment and the potential loss of dirty pages. This can result in data integrity issues or system instability within the virtualized environment.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2026-07-19 10:01:41 UTC
|