CVE-2026-64290 Details
Description
In the Linux kernel, the following vulnerability has been resolved: iommufd: Break the loop on failure in iommufd_fault_fops_read() On a copy_to_user() failure inside the inner list_for_each_entry, only the inner loop breaks; the outer while re-fetches the just-restored fault group and retries the failing copy_to_user() forever, spinning the reader at 100% CPU with fault->mutex held. Check rc after the inner loop and break the outer while as well.
A vulnerability in the Linux kernel's IOMMU fault handling can cause a denial-of-service condition. When the 'copy_to_user()' function fails, the inner loop of the fault handling process correctly breaks. However, the outer loop continues to fetch the fault group and retries the operation indefinitely. This behavior can lead to 100% CPU usage while holding the fault mutex, effectively spinning the reader without progress. The vulnerability has been addressed by modifying the loop to check for errors and break the outer loop as needed.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the Linux kernel official website.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/172fc8b19825a0f5884c38f2289188284e2d45ee | kernel.org | Patch |
| https://git.kernel.org/stable/c/5539da127d03c1f6c2e2a49fdfbe331a0ccbdea8 | kernel.org | Patch |
| https://git.kernel.org/stable/c/a38e0714affc5c0bbb40cba5a65d6d32a5e72a71 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f66c16b175509642ee7082df57c9bf3deaebae1a | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-835 | Loop with Unreachable Exit Condition ('Infinite Loop') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.11, < 6.12.101 >= 6.13, < 6.18.39 >= 6.19, < 7.1.4 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 17, 2026 | CVE Modified | kernel.org |
| Aug 12, 2026 | Initial Analysis | [email protected] |
| Aug 3, 2026 | CVE Modified | kernel.org |
| Jul 25, 2026 | New CVE Received | kernel.org |