CVE-2026-97593

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the iova to phys() function when using a 5-level translation table via ZPCI TABLE TYPE RFX. This happens because the get rto from iova() function fails to verify that the region-second origin rso is non-NULL before accessing rso[rsx], which occurs when get rso from iova() returns NULL due to an invalid region-first entry. This leads to a system crash instead of a NULL return when the function is called on an unmapped IOVA (Input/Output Virtual Address).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.