CVE-2026-53280 Details
Description
In the Linux kernel, the following vulnerability has been resolved: iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done() Local sashiko review pointed it out that group->domain could be NULL when a default domain fails to allocate during the first probe, which can crash at domain->ops->attach_dev dereference in __iommu_attach_device() invoked by pci_dev_reset_iommu_done(). pci_dev_reset_iommu_prepare() is fine as an old_domain pointer can be NULL. Skip the re-attach in pci_dev_reset_iommu_done() to fix the bug.
A vulnerability in the Linux kernel's IOMMU (Input-Output Memory Management Unit) handling can lead to a NULL pointer dereference. This issue occurs in the 'pci_dev_reset_iommu_done()' function, where 'group->domain' may be NULL if a default domain fails to allocate during the initial probe. This can cause a crash when the system attempts to access 'domain->ops->attach_dev' in the '__iommu_attach_device()' function. The problem arises because 'pci_dev_reset_iommu_prepare()' can safely handle a NULL old_domain pointer, but 'pci_dev_reset_iommu_done()' cannot. The vulnerability has been addressed by modifying 'pci_dev_reset_iommu_done()' to skip the re-attachment process when 'group->domain' is NULL, preventing the crash.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/17194cd0dd236e732d116d50840d795ca50ef196 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d769711fcddd005f1e654b3bde547140917fe696 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 7.0, < 7.0.10 7.1 rc1 7.1 rc2 7.1 rc3 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 8, 2026 | Initial Analysis | [email protected] |
| Jun 26, 2026 | New CVE Received | kernel.org |