IOMMU Fault Handling Vulnerability in Linux Kernel

CVE-2026-80894

What is CVE-2026-80894?

A vulnerability was found in the way the Linux kernel IOMMU framework handles fault responses. When replacing a device's address space, the function erroneously passed the wrong hardware page table (hwpt) to the fault handling routine. This caused potential misalignment of fault handling, as the device domains were not correctly linked with their respective fault lists. The issue arose from a regression introduced during a code refactor that swapped parameters improperly. This has been fixed by ensuring the correct hwpt is utilized for fault responses, thereby enhancing the security and stability of devices managed by the Linux kernel.

References