CVE-2026-53281

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference or refcount corruption exists in the iommu/vt-d component. When dev pasid is not found in the dev pasids list and remains NULL, teardown operations are executed unconditionally. If the domain was never attached to the IOMMU, the info variable will be NULL, leading to an immediate dereference when checking info->refcnt. Additionally, decrementing the refcount without removing a valid PASID can unbalance the count, potentially causing the refcount to drop to 0 prematurely and resulting in a use-after-free for other active devices sharing the domain.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.