CVE-2026-53280

iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done()

published June 26, 2026

CVSS
—
EPSS
0%
Percentile
3.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done()

Local sashiko review pointed it out that group->domain could be NULL when

a default domain fails to allocate during the first probe, which can crash

at domain->ops->attach_dev dereference in __iommu_attach_device() invoked

by pci_dev_reset_iommu_done().

pci_dev_reset_iommu_prepare() is fine as an old_domain pointer can be NULL.

Skip the re-attach in pci_dev_reset_iommu_done() to fix the bug.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00143 · 3.3th percentile
Published
2026-06-26T19:40Z
EPSS history
Timeline
  • 26 JUN 19:40Z
    iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done()
    cvelistv5