CVE-2026-53372 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured, otherwise dirty pages would be lost.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00166.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/3ea9ce757bd3de955b56e7bc5672fc479e40b045
https://git.kernel.org/stable/c/9009c1af5458322469fa9a4371081a4449c5947d
https://git.kernel.org/stable/c/cc5bd898ff70710ffc41cd8e5c2741cb64750047

History

Sun, 19 Jul 2026 09:15:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured, otherwise dirty pages would be lost.
Title		iommu/vt-d: Block PASID attachment to nested domain with dirty tracking
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/3ea9ce757bd3de955b56e7bc5672fc479e40b045 https://git.kernel.org/stable/c/9009c1af5458322469fa9a4371081a4449c5947d https://git.kernel.org/stable/c/cc5bd898ff70710ffc41cd8e5c2741cb64750047

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-07-19T09:10:32.453Z

Updated: 2026-07-19T09:10:32.453Z

Reserved: 2026-06-09T07:44:35.401Z

Link: CVE-2026-53372

Vulnrichment

No data.

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-53372", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-06-09T07:44:35.401Z", "datePublished": "2026-07-19T09:10:32.453Z", "dateUpdated": "2026-07-19T09:10:32.453Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-07-19T09:10:32.453Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/vt-d: Block PASID attachment to nested domain with dirty tracking\n\nKernel lacks dirty tracking support on nested domain attached to PASID,\nfails the attachment early if nesting parent domain is dirty tracking\nconfigured, otherwise dirty pages would be lost."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iommu/intel/nested.c"], "versions": [{"version": "67f6f56b59126b3bf4fc6f4ea564e450fcfcf9f6", "lessThan": "3ea9ce757bd3de955b56e7bc5672fc479e40b045", "status": "affected", "versionType": "git"}, {"version": "67f6f56b59126b3bf4fc6f4ea564e450fcfcf9f6", "lessThan": "9009c1af5458322469fa9a4371081a4449c5947d", "status": "affected", "versionType": "git"}, {"version": "67f6f56b59126b3bf4fc6f4ea564e450fcfcf9f6", "lessThan": "cc5bd898ff70710ffc41cd8e5c2741cb64750047", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iommu/intel/nested.c"], "versions": [{"version": "6.13", "status": "affected"}, {"version": "0", "lessThan": "6.13", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.30", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.7", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.13", "versionEndExcluding": "6.18.30"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.13", "versionEndExcluding": "7.0.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.13", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/3ea9ce757bd3de955b56e7bc5672fc479e40b045"}, {"url": "https://git.kernel.org/stable/c/9009c1af5458322469fa9a4371081a4449c5947d"}, {"url": "https://git.kernel.org/stable/c/cc5bd898ff70710ffc41cd8e5c2741cb64750047"}], "title": "iommu/vt-d: Block PASID attachment to nested domain with dirty tracking", "x_generator": {"engine": "bippy-1.2.0"}}}}