IOMMU TLB Invalidation Flaw in Linux Kernel

Publication date: 2026-06-24

Last updated on: 2026-07-21

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Add IOTINVAL after updating DDT/PDT entries Add riscv_iommu_iodir_iotinval() to perform required TLB and context cache invalidations after updating DDT or PDT entries, as mandated by the RISC-V IOMMU specification (Section 6.3.1 and 6.3.2).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-24

Last Modified

2026-07-21

Generated

2026-08-04

AI Q&A

2026-06-24

EPSS Evaluated

2026-08-03

NVD

CVE-2026-53057

EUVD

EUVD-2026-38925

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.13 (inc) to 6.18.33 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.0.10 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability relates to the Linux kernel's RISC-V IOMMU implementation. Specifically, it involves the lack of required TLB (Translation Lookaside Buffer) and context cache invalidations after updating DDT (Device Directory Table) or PDT (Page Directory Table) entries. The fix adds a function, riscv_iommu_iodir_iotinval(), to perform these invalidations as mandated by the RISC-V IOMMU specification sections 6.3.1 and 6.3.2.

Impact Analysis

Without the required TLB and context cache invalidations after updating DDT or PDT entries, the system may use stale or incorrect memory mappings. This can lead to potential security issues such as unauthorized memory access or data corruption, impacting system stability and security.

Hi! I’m here to help you understand CVE-2026-53057. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70