CVE-2026-90387

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the swiotlb component where swiotlb alloc tlb() may allocate from the DMA atomic pool when a decrypted pool is required from an atomic context. When CONFIG DMA DIRECT REMAP is enabled, the atomic pool uses remapped virtual addresses that differ from the direct-map addresses provided by phys to virt(). The function swiotlb init io tlb pool() incorrectly reconstructs the pool virtual address from the physical start address, leading to an incorrect address being stored in pool->vaddr. Consequently, swiotlb free tlb() passes this incorrect address to dma free from pool(), which fails to recognize the memory chunk.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.