SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-64151

HIGH · CVSS 8.4 EPSS 0.12%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's iommupt driver, where a missing PAGE_SIZE in the pgsize_bitmap could lead to improper handling of memory management. This flaw poses a high risk as it could potentially allow for unauthorized access or manipulation of memory, impacting system stability and security. Organizations utilizing Linux systems, particularly those relying on DMA operations, should prioritize patching this vulnerability to mitigate associated risks.

CVE
CVE-2026-64151
Severity
HIGH
CVSS
8.4
EPSS
0.12%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap Sashiko pointed out that the driver could drop PAGE_SIZE from the pgsize_bitmap. That is technically allowed but nothing does it, and such an iommu_domain would not be used with the DMA API today. Still, it is against the design and it is trivial to fix up. Lift the PT_WARN_ON to the if branch and just skip the fast path.

Related CVEs

Other vulnerabilities affecting the same vendor(s)