CVE-2026-53280

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference exists in the IOMMU subsystem. The group->domain pointer can be NULL if a default domain fails to allocate during the first probe. This leads to a system crash when the pci dev reset iommu done() function invokes iommu attach device(), which then attempts to dereference domain->ops->attach dev.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.