Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64290

In the Linux kernel, the following vulnerability has been resolved: iommufd: Break the loop on failure in iommufd_fault_fops_read() On a copy_to_user() failure inside the inner list_for_each_entry, only the inner loop breaks; the outer while re-fetches the just-restored fault group and retries the failing copy_to_user() forever, spinning the reader at 100% CPU with fault->mutex held. Check rc after the inner loop and break the outer while as well.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:1325e0c985cb738e3e7a95116fab8cfbbc4dfc03ecf347abbe75402d817935e8
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/iommu/iommufd/eventq.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a38e0714affc5c0bbb40cba5a65d6d32a5e72a71","status":"affected","version":"07838f7fd529c8a6de44b601d4b7057e6c8d36ed","versionType":"git"},{"lessThan":"5539da127d03c1f6c2e2a49fdfbe331a0ccbdea8","status":"affected","version":"07838f7fd529c8a6de44b601d4b7057e6c8d36ed","versionType":"git"},{"lessThan":"f66c16b175509642ee7082df57c9bf3deaebae1a","status":"affected","version":"07838f7fd529c8a…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:71f41096b96c13ac65f77356ae2dca0f8f753675a9ca5ec97fd8c0aae3df7987 · sha256:60a5f9a3b8533811… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/iommu/iommufd/eventq.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.11"},{"lessThan":"6.11","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.101","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.39","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.4","versionType":"semver"},{"l…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:71f41096b96c13ac65f77356ae2dca0f8f753675a9ca5ec97fd8c0aae3df7987 · sha256:60a5f9a3b8533811… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/iommu/iommufd/eventq.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a38e0714affc5c0bbb40cba5a65d6d32a5e72a71","status":"affected","version":"07838f7fd529c8a6de44b601d4b7057e6c8d36ed","versionType":"git"},{"lessThan":"5539da127d03c1f6c2e2a49fdfbe331a0ccbdea8","status":"affected","version":"07838f7fd529c8a6de44b601d4b7057e6c8d36ed","versionType":"git"},{"lessThan":"f66c16b175509642ee7082df57c9bf3deaebae1a","status":"affected","version":"07838f7fd529c8a…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:71f41096b96c13ac65f77356ae2dca0f8f753675a9ca5ec97fd8c0aae3df7987 · sha256:60a5f9a3b8533811… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/iommu/iommufd/eventq.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.11"},{"lessThan":"6.11","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.101","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.39","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.4","versionType":"semver"},{"l…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:71f41096b96c13ac65f77356ae2dca0f8f753675a9ca5ec97fd8c0aae3df7987 · sha256:60a5f9a3b8533811… · /containers/cna/affected/1

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/172fc8b19825a0f5884c38f2289188284e2d45ee"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:71f41096b96c13ac65f77356ae2dca0f8f753675a9ca5ec97fd8c0aae3df7987 · sha256:60a5f9a3b8533811… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/5539da127d03c1f6c2e2a49fdfbe331a0ccbdea8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:71f41096b96c13ac65f77356ae2dca0f8f753675a9ca5ec97fd8c0aae3df7987 · sha256:60a5f9a3b8533811… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/a38e0714affc5c0bbb40cba5a65d6d32a5e72a71"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:71f41096b96c13ac65f77356ae2dca0f8f753675a9ca5ec97fd8c0aae3df7987 · sha256:60a5f9a3b8533811… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/f66c16b175509642ee7082df57c9bf3deaebae1a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:71f41096b96c13ac65f77356ae2dca0f8f753675a9ca5ec97fd8c0aae3df7987 · sha256:60a5f9a3b8533811… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer