In the Linux kernel, the following vulnerability has been resolved:
iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind
When unbinding pasid - a race condition exists vs outstanding page faults.
To prevent this, the pasid_state object contains a refcount. * set to 1 on pasid bind * incremented on each ppr notification start * decremented on each ppr notification done * decremented on pasid unbind
Since refcount_dec assumes that refcount will never reach 0: the current implementation causes the following to be invoked on pasid unbind: REFCOUNT_WARN("decrement hit 0; leaking memory")
Fix this issue by changing refcount_dec to refcount_dec_and_test to explicitly handle refcount=1.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.133-86.144Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-livepatch-6.1.55-75.123Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-devel | Oct 24, 2025 | Oct 1, 2025 |
| Debian | — | Upgrade linux | Oct 3, 2025 | Oct 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 1, 2025 |
| Ubuntu | — | Upgrade linux-hwe-5.15Upgrade linux-gcp-fipsUpgrade linux-nvidia-tegra-5.15Upgrade linux-awsUpgrade linuxUpgrade linux-bluefieldUpgrade linux-azureUpgrade linux-raspiUpgrade linux-lowlatencyUpgrade linux-fipsUpgrade linux-intel-iotgUpgrade linux-nvidiaUpgrade linux-gcp-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-oracleUpgrade linux-gkeUpgrade linux-xilinx-zynqmpUpgrade linux-ibm-5.15Upgrade linux-ibmUpgrade linux-riscv-5.15Upgrade linux-aws-5.15Upgrade linux-realtimeUpgrade linux-nvidia-tegraUpgrade linux-nvidia-tegra-igxUpgrade linux-kvmUpgrade linux-azure-5.15Upgrade linux-gkeopUpgrade linux-oracle-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-fipsUpgrade linux-gcp | Oct 10, 2025 | Oct 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub