vfio/pci: Clean up DMABUFs before disabling function

Summary

CVE	CVE-2026-53322
State	PUBLISHED
Assigner	Linux
Source Priority	CVE Program / NVD first with legacy fallback
Published	2026-06-26 20:17:25 UTC
Updated	2026-07-15 01:16:32 UTC
Description	In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Clean up DMABUFs before disabling function On device shutdown, make vfio_pci_core_close_device() call vfio_pci_dma_buf_cleanup() before the function is disabled via vfio_pci_core_disable(). This ensures that all access via DMABUFs is revoked before the function's BARs become inaccessible. This fixes an issue where, if the function is disabled first, a tiny window exists in which the function's MSE is cleared and yet BARs could still be accessed via the DMABUF. The resources would also be freed and up for grabs by a different driver.

Primary CVSS: v3.1 7 HIGH from ADP

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.001820000 probability, percentile 0.080070000 (date 2026-07-17)

Problem Types: CWE-415 | CWE-826 | CWE-826 Premature Release of Resource During Expected Lifetime

Version	Source	Type	Score	Severity	Vector
3.1	ADP	CVSS	7	HIGH	`CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H`
3.1	416baaa9-dc9f-4396-8d5f-8c081fb06d67	Secondary	8.8	HIGH	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H`
3.1	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	Secondary	7	HIGH	`CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H`
3.1	CNA	DECLARED	8.8	HIGH	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H`

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Linux	Linux Kernel	All	All	All	All

Source	Vendor	Product	Version	Platforms
CNA	Linux	Linux	affected 5d74781ebc86c5fa9e9d6934024c505412de9b52 4f1000a30f67cf7d328059242776a858611d5ef9 git	Not specified
CNA	Linux	Linux	affected 5d74781ebc86c5fa9e9d6934024c505412de9b52 d97708701434ce72968e771976aaf9d3438fcafd git	Not specified
CNA	Linux	Linux	affected 6.19	Not specified
CNA	Linux	Linux	unaffected 6.19 semver	Not specified
CNA	Linux	Linux	unaffected 7.0.10 7.0.* semver	Not specified
CNA	Linux	Linux	unaffected 7.1 * original_commit_for_fix	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 10	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 6	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 7	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 7	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 8	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 9	Not specified	Not specified
ADP	Red Hat	Red Hat Enterprise Linux 9	Not specified	Not specified

Reference	Source	Link	Tags
git.kernel.org/stable/c/d97708701434ce72968e771976aaf9d3438fcafd	416baaa9-dc9f-4396-8d5f-8c081fb06d67	git.kernel.org	Patch
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53322.json	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	security.access.redhat.com	Third Party Advisory
git.kernel.org/stable/c/4f1000a30f67cf7d328059242776a858611d5ef9	416baaa9-dc9f-4396-8d5f-8c081fb06d67	git.kernel.org	Patch
access.redhat.com/security/cve/CVE-2026-53322	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	access.redhat.com	Third Party Advisory
bugzilla.redhat.com/show_bug.cgi	0b0ca135-0b70-47e7-9f44-1890c2a1c46c	bugzilla.redhat.com	Third Party Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Source	Time	Event
ADP	2026-06-26T00:00:00.000Z	Reported to Red Hat.
ADP	2026-06-26T00:00:00.000Z	Made public.

There are currently no legacy QID mappings associated with this CVE.