Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-53280

In the Linux kernel, the following vulnerability has been resolved: iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done() Local sashiko review pointed it out that group->domain could be NULL when a default domain fails to allocate during the first probe, which can crash at domain->ops->attach_dev dereference in __iommu_attach_device() invoked by pci_dev_reset_iommu_done(). pci_dev_reset_iommu_prepare() is fine as an old_domain pointer can be NULL. Skip the re-attach in pci_
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:e27fc7269f63151bb09b7c90dd6840db307ec3c7f8cfb458e17c9c526dbbd8f3
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/iommu/iommu.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"17194cd0dd236e732d116d50840d795ca50ef196","status":"affected","version":"c279e83953d937470f8a6e69b69f62608714f13f","versionType":"git"},{"lessThan":"d769711fcddd005f1e654b3bde547140917fe696","status":"affected","version":"c279e83953d937470f8a6e69b69f62608714f13f","versionType":"git"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:308fe33ab955da3b67989f54eb127b2428071ab0550c7176388ff079c2060738 · sha256:23626b344462021f… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/iommu/iommu.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"7.0"},{"lessThan":"7.0","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.10","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.1","versionType":"original_commit_for_fix"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:308fe33ab955da3b67989f54eb127b2428071ab0550c7176388ff079c2060738 · sha256:23626b344462021f… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/iommu/iommu.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"17194cd0dd236e732d116d50840d795ca50ef196","status":"affected","version":"c279e83953d937470f8a6e69b69f62608714f13f","versionType":"git"},{"lessThan":"d769711fcddd005f1e654b3bde547140917fe696","status":"affected","version":"c279e83953d937470f8a6e69b69f62608714f13f","versionType":"git"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:308fe33ab955da3b67989f54eb127b2428071ab0550c7176388ff079c2060738 · sha256:23626b344462021f… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/iommu/iommu.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"7.0"},{"lessThan":"7.0","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.10","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.1","versionType":"original_commit_for_fix"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:308fe33ab955da3b67989f54eb127b2428071ab0550c7176388ff079c2060738 · sha256:23626b344462021f… · /containers/cna/affected/1

Source references

2 source assertions
{"url":"https://git.kernel.org/stable/c/17194cd0dd236e732d116d50840d795ca50ef196"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:308fe33ab955da3b67989f54eb127b2428071ab0550c7176388ff079c2060738 · sha256:23626b344462021f… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/d769711fcddd005f1e654b3bde547140917fe696"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:308fe33ab955da3b67989f54eb127b2428071ab0550c7176388ff079c2060738 · sha256:23626b344462021f… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer