In the Linux kernel, the following vulnerability has been resolved:
vfio/pds: Fix missing detach_ioas op
When CONFIG_IOMMUFD is enabled and a device is bound to the pds_vfio_pci driver, the following WARN_ON() trace is seen and probe fails:
WARNING: CPU: 0 PID: 5040 at drivers/vfio/vfio_main.c:317 __vfio_register_dev+0x130/0x140 [vfio] <...> pds_vfio_pci 0000:08:00.1: probe with driver pds_vfio_pci failed with error -22
This is because the driver's vfio_device_ops.detach_ioas isn't set.
Fix this by using the generic vfio_iommufd_physical_detach_ioas function.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2025 | Aug 22, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-gkeUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-intel-iotgUpgrade linux-image-aws-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-awsUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-realtimeUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-azure-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-azureUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-virtual-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-ibm-classicUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-gkeopUpgrade linux-image-fips-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-gke-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-generic-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-xilinx-6.8Upgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-genericUpgrade linux-image-gcp-fipsUpgrade linux-image-oracle-64k-6.8 | Nov 25, 2025 | Nov 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub