CVE-2026-53322 Details
Description
In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Clean up DMABUFs before disabling function On device shutdown, make vfio_pci_core_close_device() call vfio_pci_dma_buf_cleanup() before the function is disabled via vfio_pci_core_disable(). This ensures that all access via DMABUFs is revoked before the function's BARs become inaccessible. This fixes an issue where, if the function is disabled first, a tiny window exists in which the function's MSE is cleared and yet BARs could still be accessed via the DMABUF. The resources would also be freed and up for grabs by a different driver.
A vulnerability in the Linux kernel's VFIO PCI subsystem has been addressed. The issue arose because, during device shutdown, the cleanup of DMA buffers was not performed before disabling the function. This oversight created a brief window where the function's memory state was cleared, but its Base Address Registers (BARs) could still be accessed through DMA buffers. As a result, the resources could be released and potentially used by a different driver. The vulnerability affected several versions of the Linux kernel.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://access.redhat.com/errata/RHSA-2026:65334 | redhat-SADP | |
| https://access.redhat.com/security/cve/CVE-2026-53322 | redhat-SADP | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2493709 | redhat-SADP | Third Party Advisory |
| https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53322.json | redhat-SADP | Third Party Advisory |
| https://git.kernel.org/stable/c/4f1000a30f67cf7d328059242776a858611d5ef9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d97708701434ce72968e771976aaf9d3438fcafd | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-415 | Double Free | [email protected] |
| CWE-826 | Premature Release of Resource During Expected Lifetime | redhat-SADP |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.19, < 7.0.10 |
CPE
Remediation
| |
Change History
7 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 9, 2026 | CVE Modified | redhat-SADP |
| Sep 9, 2026 | CVE Modified | kernel.org |
| Jul 15, 2026 | CVE Modified | redhat-SADP |
| Jul 6, 2026 | Initial Analysis | [email protected] |
| Jun 30, 2026 | CVE Modified | redhat-SADP |
| Jun 28, 2026 | CVE Modified | kernel.org |
| Jun 26, 2026 | New CVE Received | kernel.org |