CVE-2026-53322

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists during device shutdown where the vfio pci core close device() function may not revoke DMABUF access before the function is disabled via vfio pci core disable(). This creates a small window of time where the function's Memory Space Enable (MSE) is cleared, but Base Address Registers (BARs) remain accessible via the DMABUF. Consequently, these resources could be freed and potentially accessed by a different driver. DMABUF is a framework in the Linux kernel that allows sharing buffers between different drivers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.