CVE-2026-93205

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the iommu/arm-smmu-v3 component where the arm smmu device remove() function manually frees the IOPF queue, destroys the vmid map, and disables the device. Because the IRQs and queues are managed by devm (a resource management system that handles device cleanup), and devm only unwinds after the remove function returns, the cleanup occurs in the incorrect order. This results in the IOPF queue being freed before the event-queue IRQ, which may still be using it, potentially leading to a use-after-free condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.