CVE-2026-64290CWE-835

CVE-2026-64290

Medium · published July 25, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
4.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iommufd: Break the loop on failure in iommufd_fault_fops_read()

On a copy_to_user() failure inside the inner list_for_each_entry, only the

inner loop breaks; the outer while re-fetches the just-restored fault group

and retries the failing copy_to_user() forever, spinning the reader at 100%

CPU with fault->mutex held.

Check rc after the inner loop and break the outer while as well.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00159 · 4.7th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2026-07-25T14:17Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 6.11, < 6.12.1016.12.101
linux/linux_kernel≥ 6.13, < 6.18.396.18.39
linux/linux_kernel≥ 6.19, < 7.1.47.1.4
References (4)
EPSS history
Timeline
  • 25 JUL 08:49Z
    iommufd: Break the loop on failure in iommufd_fault_fops_read()
    cvelistv5