CVE-2026-90244

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the IOMMU DMA subsystem where concurrent access to the msi page list can lead to data corruption. In VFIO type1 legacy containers, newly attached groups may be merged into an existing domain if their IOMMU operations and cache-coherency enforcement match. Because the iommu dma get msi page() function only asserts that the caller's own group mutex is held, multiple devices within the same merged domain can enter this function simultaneously. This is particularly relevant for IOMMUs that publish IOMMU RESV SW MSI, such as ARM SMMU, where guest drivers probing and allocating MSIs in parallel can cause concurrent execution and subsequent corruption of the msi page list.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.