CVE-2026-80687
Received Received - Intake

iommufd Viommu Lock Release Vulnerability in Linux Kernel

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: iommufd/viommu: Release the igroup lock on the vdevice_size error path iommufd_vdevice_alloc_ioctl() takes idev->igroup->lock, then validates the driver's vdevice_size against the core structure size with a WARN_ON_ONCE. On failure that guard jumps to out_put_idev, below out_unlock_igroup, so it skips the mutex_unlock(), leaving the igroup lock held and deadlocking the next vDEVICE operation on that group. Jump to out_unlock_igroup instead.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-28
Last Modified
2026-08-28
Generated
2026-09-17
AI Q&A
2026-08-28
EPSS Evaluated
2026-09-15
NVD
CVE-2026-80687
EUVD
EUVD-2026-67563

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a locking issue in the iommufd subsystem. When allocating a virtual device, the function iommufd_vdevice_alloc_ioctl() acquires a lock but fails to release it properly if a size validation check fails. This causes the lock to remain held, leading to a deadlock in subsequent operations on the same device group.

Detection Guidance

This vulnerability is specific to the Linux kernel's iommufd subsystem and may not have direct network detection methods. Check kernel logs for iommufd-related errors or deadlocks using commands like dmesg | grep iommufd or journalctl -k | grep iommufd.

Impact Analysis

This vulnerability can cause system hangs or crashes when performing operations on virtual devices managed by iommufd. Users may experience unresponsive systems or require a reboot to recover, potentially leading to data loss or service disruption.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it is a Linux kernel locking issue that could lead to system deadlocks rather than data breaches or privacy violations.

Mitigation Strategies

Apply the latest Linux kernel patches or updates that address this issue. Monitor for deadlocks in iommufd operations and restart affected services if necessary. Ensure your kernel version is updated to one that includes the fix for this bug.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80687. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart