CVE-2026-53372

MEDIUM5.5

iommu/vt-d: Block PASID attachment to nested domain with dirty tracking

Published Jul 19, 2026

Modified 2 weeks ago

Details

In the Linux kernel, the following vulnerability has been resolved:

iommu/vt-d: Block PASID attachment to nested domain with dirty tracking

Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured, otherwise dirty pages would be lost.

References

WEB

https://git.kernel.org/stable/c/3ea9ce757bd3de955b56e7bc5672fc479e40b045

WEB

https://git.kernel.org/stable/c/9009c1af5458322469fa9a4371081a4449c5947d

WEB

https://git.kernel.org/stable/c/cc5bd898ff70710ffc41cd8e5c2741cb64750047

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-53372

CVSS Analysis

CVSS v3.1

5.5

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Ecosystems

Timeline

PublishedJul 19, 2026

ModifiedJul 19, 2026

CVE-2026-53372 | Mondoo Vulnerability Intelligence