CVE-2026-74328
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
In the Linux kernel, the iommufd subsystem has an ordering issue when detaching from dmabuf. The mutex could still be in use through the dmabuf invalidation callbacks, so the pages content should not be destroyed until the dmabuf is fully detached.
Risk Assessment
Premature destruction of page content can lead to data integrity issues or system crashes during dmabuf operations.
Recommendation
Apply the kernel patch that ensures page content is destroyed only after the dmabuf is fully detached.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: iommufd: Destroy the pages content after detaching from dmabuf Sashiko points out this has gotten out of order, the mutex could still be in use through the dmabuf invalidation callbacks. Don't destroy any of the pages content until the dmabuf is fully detached.