In the Linux kernel, the following vulnerability has been resolved: iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap Sashiko pointed out… (CVE-2026-64151)
In the Linux kernel, the following vulnerability has been resolved: iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap Sashiko pointed out that the driver could drop PAGE_SIZE from the pgsize_bitmap. That is technically allowed but nothing does it, and such an iommu_domain would not be used with the DMA API today. Still, it is against the design and it is trivial to fix up. Lift the PT_WARN_ON to the if branch and just skip the fast path.
AI Analysis
Technical Summary
The Linux kernel vulnerability CVE-2026-64151 concerns the iommupt driver where the pgsize_bitmap could omit PAGE_SIZE. Although this omission is technically permissible, it contradicts the design assumptions and results in an iommu_domain that is not compatible with current DMA API usage. The fix involves modifying the code to detect this condition and bypass the fast path, thereby enforcing correct behavior.
Potential Impact
The vulnerability could cause the iommu_domain to be in an unexpected state due to the missing PAGE_SIZE in pgsize_bitmap, potentially affecting the correct operation of the DMA API. However, no known exploits are reported, and the issue is primarily a design inconsistency that has been corrected.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this issue by adjusting the iommupt driver code. Users should update to the patched kernel version once available. Patch status is not explicitly confirmed in the provided data; check the official Linux kernel advisories for the exact fixed versions and remediation guidance.
In the Linux kernel, the following vulnerability has been resolved: iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap Sashiko pointed out… (CVE-2026-64151)
Description
In the Linux kernel, the following vulnerability has been resolved: iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap Sashiko pointed out that the driver could drop PAGE_SIZE from the pgsize_bitmap. That is technically allowed but nothing does it, and such an iommu_domain would not be used with the DMA API today. Still, it is against the design and it is trivial to fix up. Lift the PT_WARN_ON to the if branch and just skip the fast path.
CVSS v3.1
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel vulnerability CVE-2026-64151 concerns the iommupt driver where the pgsize_bitmap could omit PAGE_SIZE. Although this omission is technically permissible, it contradicts the design assumptions and results in an iommu_domain that is not compatible with current DMA API usage. The fix involves modifying the code to detect this condition and bypass the fast path, thereby enforcing correct behavior.
Potential Impact
The vulnerability could cause the iommu_domain to be in an unexpected state due to the missing PAGE_SIZE in pgsize_bitmap, potentially affecting the correct operation of the DMA API. However, no known exploits are reported, and the issue is primarily a design inconsistency that has been corrected.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this issue by adjusting the iommupt driver code. Users should update to the patched kernel version once available. Patch status is not explicitly confirmed in the provided data; check the official Linux kernel advisories for the exact fixed versions and remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-953v-7jq6-jh93
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64151"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a5d27a82a4a8d598912aefb
Added to database: 07/19/2026, 19:38:16 UTC
Last enriched: 07/19/2026, 19:45:29 UTC
Last updated: 07/20/2026, 19:41:21 UTC
Views: 9
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.