iommu/dma: Check atomic pool allocation result directly

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2026-90388
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-09-17 17:17:38 UTC
Updated2026-10-19 09:19:32 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: iommu/dma: Check atomic pool allocation result directly The non-blocking, non-coherent allocation path uses dma_alloc_from_pool(), which returns the allocated page and fills cpu_addr only on success. Do not rely on cpu_addr to detect allocation failure in this path. Check the returned page directly before using it for the IOMMU mapping.

Risk And Classification

Primary CVSS: v3.1 7.8 HIGH from 416baaa9-dc9f-4396-8d5f-8c081fb06d67

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.001640000 probability, percentile 0.060210000 (date 2026-09-21)

VersionSourceTypeScoreSeverityVector
3.1416baaa9-dc9f-4396-8d5f-8c081fb06d67Secondary7.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
3.1CNADECLARED7.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 Breakdown

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 9420139f516d7fbc248ce17f35275cb005ed98ea ac9cd0a669b8be5d178dbd471b0d68039dac58b5 git Not specified
CNA Linux Linux affected 9420139f516d7fbc248ce17f35275cb005ed98ea db46cb9da83a507d86d2bb080bdb09c865da3d0a git Not specified
CNA Linux Linux affected 9420139f516d7fbc248ce17f35275cb005ed98ea d56c3f955b21e5764c1497e295a5b5d0b3a40470 git Not specified
CNA Linux Linux affected 9420139f516d7fbc248ce17f35275cb005ed98ea 06dffc96693083dda3412311406e558cf27f1574 git Not specified
CNA Linux Linux affected 9420139f516d7fbc248ce17f35275cb005ed98ea a4ace31d732b657d774e31fb444c0c27d42c78e5 git Not specified
CNA Linux Linux affected 9420139f516d7fbc248ce17f35275cb005ed98ea fb0b39287ba894dbdfac2901c51788b63f5c2291 git Not specified
CNA Linux Linux affected 9420139f516d7fbc248ce17f35275cb005ed98ea 8c486293ddd0af60991408149fc3e964ea888dc4 git Not specified
CNA Linux Linux affected 9420139f516d7fbc248ce17f35275cb005ed98ea af95a0ebc0a0db0762be75f51eadf770bad01aaa git Not specified
CNA Linux Linux affected 47184b9ddf184cc9a77cf441943a0fe9b7afa575 git Not specified
CNA Linux Linux affected 5.8.6 5.9 semver Not specified
CNA Linux Linux affected 5.9 Not specified
CNA Linux Linux unaffected 5.9 semver Not specified
CNA Linux Linux unaffected 5.10.270 5.10.* semver Not specified
CNA Linux Linux unaffected 5.15.221 5.15.* semver Not specified
CNA Linux Linux unaffected 6.1.188 6.1.* semver Not specified
CNA Linux Linux unaffected 6.6.157 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.110 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.52 6.18.* semver Not specified
CNA Linux Linux unaffected 7.2.6 7.2.* semver Not specified
CNA Linux Linux unaffected 7.3 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/af95a0ebc0a0db0762be75f51eadf770bad01aaa 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/fb0b39287ba894dbdfac2901c51788b63f5c2291 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/ac9cd0a669b8be5d178dbd471b0d68039dac58b5 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/06dffc96693083dda3412311406e558cf27f1574 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/d56c3f955b21e5764c1497e295a5b5d0b3a40470 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/a4ace31d732b657d774e31fb444c0c27d42c78e5 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/db46cb9da83a507d86d2bb080bdb09c865da3d0a 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/8c486293ddd0af60991408149fc3e964ea888dc4 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report