CVE-2026-74328EPSS p5.2%
CVE-2026-74328CVE-2026-74328
Description
In the Linux kernel, the following vulnerability has been resolved:
iommufd: Destroy the pages content after detaching from dmabuf
Sashiko points out this has gotten out of order, the mutex could still be
in use through the dmabuf invalidation callbacks. Don't destroy any of the
pages content until the dmabuf is fully detached.
Scoring
| CVSS | 8.8 () |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
| EPSS | 0.17% probability of exploitation · percentile 5.2% · 2026-10-05T12:00:23Z |
| Last modified | 2026-08-17 |