CVE-2026-74328 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: iommufd: Destroy the pages content after detaching from dmabuf Sashiko points out this has gotten out of order, the mutex could still be in use through the dmabuf invalidation callbacks. Don't destroy any of the pages content until the dmabuf is fully detached.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00155.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/0507fcedbdcc87281ef8639c045fc9980363bbb6
https://git.kernel.org/stable/c/f2d70dbd3dcefa8e3c380beff9c31f5f033a4221

History

Sat, 15 Aug 2026 06:15:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: iommufd: Destroy the pages content after detaching from dmabuf Sashiko points out this has gotten out of order, the mutex could still be in use through the dmabuf invalidation callbacks. Don't destroy any of the pages content until the dmabuf is fully detached.
Title		iommufd: Destroy the pages content after detaching from dmabuf
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/0507fcedbdcc87281ef8639c045fc9980363bbb6 https://git.kernel.org/stable/c/f2d70dbd3dcefa8e3c380beff9c31f5f033a4221

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:58:22.371Z

Updated: 2026-08-15T05:58:22.371Z

Reserved: 2026-08-15T05:44:03.884Z

Link: CVE-2026-74328

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:22:33.520

Modified: 2026-08-15T06:22:33.520

Link: CVE-2026-74328

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-74328", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-15T05:44:03.884Z", "datePublished": "2026-08-15T05:58:22.371Z", "dateUpdated": "2026-08-15T05:58:22.371Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-15T05:58:22.371Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommufd: Destroy the pages content after detaching from dmabuf\n\nSashiko points out this has gotten out of order, the mutex could still be\nin use through the dmabuf invalidation callbacks. Don't destroy any of the\npages content until the dmabuf is fully detached."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iommu/iommufd/pages.c"], "versions": [{"version": "71db84a092c399f434976d0522e848e9803cd51a", "lessThan": "0507fcedbdcc87281ef8639c045fc9980363bbb6", "status": "affected", "versionType": "git"}, {"version": "71db84a092c399f434976d0522e848e9803cd51a", "lessThan": "f2d70dbd3dcefa8e3c380beff9c31f5f033a4221", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iommu/iommufd/pages.c"], "versions": [{"version": "6.19", "status": "affected"}, {"version": "0", "lessThan": "6.19", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.19", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.19", "versionEndExcluding": "7.2-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/0507fcedbdcc87281ef8639c045fc9980363bbb6"}, {"url": "https://git.kernel.org/stable/c/f2d70dbd3dcefa8e3c380beff9c31f5f033a4221"}], "title": "iommufd: Destroy the pages content after detaching from dmabuf", "x_generator": {"engine": "bippy-1.2.0"}}}}