In the Linux kernel, the following vulnerability has been resolved:

iommufd: Destroy the pages content after detaching from dmabuf

Sashiko points out this has gotten out of order, the mutex could still be
in use through the dmabuf invalidation callbacks. Don't destroy any of the
pages content until the dmabuf is fully detached.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00155.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
71db84a092c399f434976d0522e848e9803cd51a affected < 0507fcedbdcc87281ef8639c045fc9980363bbb6
71db84a092c399f434976d0522e848e9803cd51a affected < f2d70dbd3dcefa8e3c380beff9c31f5f033a4221
Linux Linux affected
Version Status Constraints
6.19 affected —
0 unaffected < 6.19
7.1.5 unaffected ≤ 7.1.*
7.2-rc1 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0507fcedbdcc87281ef8639c045fc9980363bbb6 cve-icon cve-icon
https://git.kernel.org/stable/c/f2d70dbd3dcefa8e3c380beff9c31f5f033a4221 cve-icon cve-icon
History

Sat, 15 Aug 2026 17:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-416
CWE-590

Sat, 15 Aug 2026 06:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: iommufd: Destroy the pages content after detaching from dmabuf Sashiko points out this has gotten out of order, the mutex could still be in use through the dmabuf invalidation callbacks. Don't destroy any of the pages content until the dmabuf is fully detached.
Title iommufd: Destroy the pages content after detaching from dmabuf
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:58:22.371Z

Reserved: 2026-08-15T05:44:03.884Z

Link: CVE-2026-74328

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:22:33.520

Modified: 2026-08-15T06:22:33.520

Link: CVE-2026-74328

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-15T16:45:10Z

Weaknesses