CVE-2026-64292

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the iommufd component, memory allocation for veventq occurs inside a spinlock. Because the queue depth is determined by user space, a user can allocate excessively large queues to exhaust atomic memory reserves. To address this, the allocation is moved outside the spinlock using GFP NOWAIT, which allows the system to fail quickly under memory pressure without consuming GFP ATOMIC reserves or performing direct-reclaiming from the threaded IRQ handler. If allocation fails, the system queues the lost events header and returns -ENOMEM to notify the caller of kernel-side memory pressure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.