CVE-2026-64152

Analyzed Analyzed - Analysis Complete

IOMMU Map Error Handling in Linux Kernel

Publication date: 2026-07-19

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: iommu: Handle unmap error when iommu_debug is enabled Sashiko noticed a latent bug where the map error flow called iommu_unmap() which calls iommu_debug_unmap_begin()/iommu_debug_unmap_end() however since this is an error path the map flow never actually established the original iommu_debug_map() it will malfunction. Lift the unmap error handling into iommu_map_nosync() and reorder it so the trace_map()/iommu_debug_map() records the partial mapping and then immediately unmaps it. This avoid creating the unbalanced tracking and provides saner tracing instead of a unmap unmatched to any map.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-19

Last Modified

2026-08-17

Generated

2026-08-29

AI Q&A

2026-07-19

EPSS Evaluated

2026-08-28

NVD

CVE-2026-64152

EUVD

EUVD-2026-45837

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 7.0 (inc) to 7.0.11 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves improper handling of unmap errors when iommu_debug is enabled. A bug exists where an error in the map flow calls iommu_unmap() without a prior iommu_debug_map(), causing unbalanced tracking and incorrect tracing.

Detection Guidance

This vulnerability is specific to the Linux kernel's IOMMU subsystem and may not have direct network detection methods. Check kernel logs for IOMMU-related errors using dmesg | grep -i iommu or journalctl -k | grep -i iommu. Monitor for unmap errors or trace mismatches in IOMMU operations.

Impact Analysis

This vulnerability may lead to incorrect IOMMU debugging logs and potential system instability if unmap operations occur without corresponding map operations. It could affect systems using IOMMU debugging features.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it pertains to a low-level kernel memory management issue in the IOMMU subsystem. No evidence suggests data exposure or privacy violations.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for this vulnerability. If immediate patching is not possible, disable iommu_debug by setting iommu.debug=0 in kernel parameters as a temporary workaround.

Hi! I’m here to help you understand CVE-2026-64152. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70