In the Linux kernel, the following vulnerability has been resolved:
iommu: Handle unmap error when iommu_debug is enabled
Sashiko noticed a latent bug where the map error flow called iommu_unmap() which calls iommu_debug_unmap_begin()/iommu_debug_unmap_end() however since this is an error path the map flow never actually established the original iommu_debug_map() it will malfunction.
Lift the unmap error handling into iommu_map_nosync() and reorder it so the trace_map()/iommu_debug_map() records the partial mapping and then immediately unmaps it. This avoid creating the unbalanced tracking and provides saner tracing instead of a unmap unmatched to any map.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-azure-fde-7.0Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-nvidiaUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-ibm-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-gcp-7.0Upgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-azureUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-aws-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-bosUpgrade linux-image-aws-64kUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-oracle-7.0Upgrade linux-image-raspi-7.0Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-oracle-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-nvidia-64kUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-nvidia-7.0Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-gcpUpgrade linux-image-ibmUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-awsUpgrade linux-image-azure-fde | Jul 21, 2026 | Jul 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub