In the Linux kernel, the following vulnerability has been resolved:
iommu/dma: Do not try to iommu_map a 0 length region in swiotlb
iommu_dma_iova_link_swiotlb() processes a mapping that is unaligned in three parts, the head, middle and trailer. If the middle is empty because there are no aligned pages it will call down to iommu_map() with a 0 size which the iommupt implementation will fail as illegal.
It then tries to do an error unwind and starts from the wrong spot corrupting the mapping so the eventual destruction triggers a WARN_ON.
Check for 0 length and avoid mapping and use offset not 0 as the starting point to unlink.
This is frequently triggered by using some kinds of thunderbolt NVMe drives that trigger forced SWIOTLB for unaligned memory. NVMe seems to pass in oddly aligned buffers for the passthrough commands from smartctl that hit this condition.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool6.18-debuginfoUpgrade python3-perf6.18-debuginfoUpgrade perf6.18-debuginfoUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-headersUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel-livepatch-6.18.36-69.134Upgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-debuginfoUpgrade python3-perf6.18Upgrade microvm-kernel6.18Upgrade kernel6.18-tools-develUpgrade bpftool6.18Upgrade kernel6.18-toolsUpgrade kernel6.18Upgrade kernel6.18-modules-extraUpgrade perf6.18Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-devel | Jul 21, 2026 | Jun 25, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jun 25, 2026 |
| Ubuntu | — | Upgrade linux-image-raspi-realtimeUpgrade linux-image-7.0.0-31-genericUpgrade linux-image-oem-26.04Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-7.0.0-1019-raspi-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-nvidiaUpgrade linux-image-7.0.0-1013-oemUpgrade linux-image-7.0.0-1012-awsUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-7.0.0-2018-nvidia-bos-64kUpgrade linux-image-7.0.0-2018-nvidia-bosUpgrade linux-image-7.0.0-31-generic-64kUpgrade linux-image-7.0.0-1006-gke-64kUpgrade linux-image-azure-lts-26.04Upgrade linux-image-oem-7.0Upgrade linux-image-genericUpgrade linux-image-7.0.0-1019-raspiUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-azureUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-ibm-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-oracle-7.0Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-7.0.0-1018-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-7.0.0-31-realtime-64kUpgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-nvidia-bosUpgrade linux-image-aws-64kUpgrade linux-image-oem-26.04aUpgrade linux-image-gke-64k-7.0Upgrade linux-image-raspiUpgrade linux-image-generic-64k-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-nvidia-64kUpgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-azure-7.0Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-gke-64kUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-7.0.0-31-realtimeUpgrade linux-image-nvidia-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-7.0Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-gcp-7.0Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-generic-7.0Upgrade linux-image-7.0.0-1012-aws-64kUpgrade linux-image-realtimeUpgrade linux-image-gke-7.0Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-7.0.0-1018-nvidiaUpgrade linux-image-oem-26.04bUpgrade linux-image-awsUpgrade linux-image-7.0.0-1006-gkeUpgrade linux-image-virtualUpgrade linux-image-aws-64k-7.0Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-1013-ibmUpgrade linux-image-realtime-64kUpgrade linux-image-virtual-7.0 | Sep 14, 2026 | Sep 7, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub