CVE-2026-74328

Received Received - Intake

Race Condition in Linux Kernel iommufd dmabuf Handling

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: iommufd: Destroy the pages content after detaching from dmabuf Sashiko points out this has gotten out of order, the mutex could still be in use through the dmabuf invalidation callbacks. Don't destroy any of the pages content until the dmabuf is fully detached.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-74328

EUVD

EUVD-2026-59475

Affected Vendors & Products

Vendor	Product	Version / Range
linux_kernel	linux_kernel	*
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves improper handling of memory pages when detaching from a dmabuf. The issue occurs because mutexes used in dmabuf invalidation callbacks may still be active when memory content is destroyed, leading to potential race conditions or memory corruption.

Detection Guidance

This vulnerability is specific to the Linux kernel's iommufd subsystem and involves improper handling of dmabuf invalidation callbacks. Detection requires checking kernel logs for related errors or kernel crashes during dmabuf operations. No direct commands are provided in the context to detect this issue.

Impact Analysis

This vulnerability could allow attackers to cause memory corruption, leading to system crashes, privilege escalation, or data leaks. Systems using the affected Linux kernel components may experience instability or security breaches if exploited.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the iommufd issue. Monitor for dmabuf-related crashes or memory corruption as indicators of exploitation.

Hi! I’m here to help you understand CVE-2026-74328. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70