Linux Kernel Vulnerability Affecting IOMMU and Virtual Devices

CVE-2026-80687

What is CVE-2026-80687?

A vulnerability exists in the Linux kernel's handling of the IOMMU subsystem, specifically within the iommufd_vdevice_alloc_ioctl function. When validating a driver's vdevice size, if an error occurs, the process jumps to a section that skips the necessary mutex unlock operation. This oversight results in the igroup lock being held indefinitely, causing a deadlock during subsequent virtual device operations. Correcting this issue requires adjusting the error handling flow to ensure the igroup lock is released appropriately, thereby maintaining system stability and preventing resource contention.

References