OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-90388

HIGH · CVSS 7.8 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-09-17 · Last synced 2026-10-12

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's IOMMU subsystem, specifically in the handling of atomic pool allocations via the dma_alloc_from_pool() function. An improper check for allocation failure could lead to the use of an invalid memory page, potentially resulting in system instability or data corruption. Organizations utilizing Linux systems, particularly those relying on IOMMU for device memory management, should prioritize addressing this issue to maintain system integrity.

CVE
CVE-2026-90388
Severity
HIGH
CVSS
7.8
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: iommu/dma: Check atomic pool allocation result directly The non-blocking, non-coherent allocation path uses dma_alloc_from_pool(), which returns the allocated page and fills cpu_addr only on success. Do not rely on cpu_addr to detect allocation failure in this path. Check the returned page directly before using it for the IOMMU mapping.