In the Linux kernel, the following vulnerability has been resolved:
iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind
When unbinding pasid - a race condition exists vs outstanding page faults.
To prevent this, the pasid_state object contains a refcount. * set to 1 on pasid bind * incremented on each ppr notification start * decremented on each ppr notification done * decremented on pasid unbind
Since refcount_dec assumes that refcount will never reach 0: the current implementation causes the following to be invoked on pasid unbind: REFCOUNT_WARN("decrement hit 0; leaking memory")
Fix this issue by changing refcount_dec to refcount_dec_and_test to explicitly handle refcount=1.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.133-86.144Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-toolsUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.55-75.123Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel | Oct 24, 2025 | Oct 1, 2025 |
| Debian | — | Upgrade linux | Oct 3, 2025 | Oct 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 1, 2025 |
| Ubuntu | — | Upgrade linux-gcp-fipsUpgrade linux-hwe-5.15Upgrade linux-azureUpgrade linuxUpgrade linux-nvidia-tegra-5.15Upgrade linux-raspiUpgrade linux-awsUpgrade linux-bluefieldUpgrade linux-nvidia-tegraUpgrade linux-gcp-5.15Upgrade linux-aws-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-intel-iotgUpgrade linux-lowlatency-hwe-5.15Upgrade linux-realtimeUpgrade linux-kvmUpgrade linux-azure-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-gcpUpgrade linux-gkeopUpgrade linux-oracle-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-lowlatencyUpgrade linux-ibm-5.15Upgrade linux-ibmUpgrade linux-fipsUpgrade linux-gkeUpgrade linux-oracleUpgrade linux-intel-iot-realtimeUpgrade linux-riscv-5.15Upgrade linux-aws-fipsUpgrade linux-nvidia | Oct 10, 2025 | Oct 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub