Log in Start free

Vulnerability · Published Jun 26, 2026 · Assigned by Linux

CVE-2026-53322vfio/pci: Clean up DMABUFs before disabling function

High 8.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.1%top 97.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Clean up DMABUFs before disabling function On device shutdown, make vfio_pci_core_close_device() call vfio_pci_dma_buf_cleanup() before the function is disabled via vfio_pci_core_disable(). This ensures that all access via DMABUFs is revoked before the function's BARs become inaccessible. This fixes an issue where, if the function is disabled first, a tiny window exists in which the function's MSE is cleared and yet BARs could still be accessed via the DMABUF. The resources would also be freed and up for grabs by a different driver.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10kernel6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-debug6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-debug-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-debug-devel6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-debug-devel-matched6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-debug-modules6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-debug-modules-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-debug-modules-extra6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-devel6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-devel-matched6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-modules6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-modules-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-64k-modules-extra6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-abi-stablelists6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-cross-headers6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-debug6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-debug-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-debug-devel6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-debug-devel-matched6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-debug-modules6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-debug-modules-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-debug-modules-extra6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-debug-uki-virt6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-devel6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-devel-matched6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-doc6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-headers6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-modules6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-modules-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-modules-extra6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-modules-extra-matched6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k-debug6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k-debug-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k-debug-devel6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k-debug-modules6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k-debug-modules-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k-debug-modules-extra6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k-devel6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k-modules6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k-modules-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-64k-modules-extra6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-debug6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-debug-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-debug-devel6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-debug-modules6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-debug-modules-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-debug-modules-extra6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-devel6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-modules6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-modules-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-rt-modules-extra6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-tools6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-tools-libs6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-tools-libs-devel6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-uki-virt6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-uki-virt-addons6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-zfcpdump6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-zfcpdump-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-zfcpdump-devel6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-zfcpdump-devel-matched6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-zfcpdump-modules6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-zfcpdump-modules-core6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10kernel-zfcpdump-modules-extra6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10libperf6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10perf6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10python3-perf6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10rtla6.12.0-211.53.1.el10_2ALSA-2026:65334
AlmaLinux:10rv6.12.0-211.53.1.el10_2ALSA-2026:65334
Debian:14linux7.0.10-1DEBIAN-CVE-2026-53322
Rocky Linux:10kernel0:6.12.0-211.53.1.el10_2RLSA-2026:65334
Ubuntu:26.04:LTSlinux7.0.0-28.28UBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-53322
Ubuntu:26.04:LTSlinux-aws7.0.0-1009.9UBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-53322
Ubuntu:26.04:LTSlinux-azure7.0.0-1010.10UBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-azure-7.07.0.0-1014.14~24.04.1UBUNTU-CVE-2026-53322
Ubuntu:26.04:LTSlinux-azure-fde7.0.0-1009.9UBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-azure-fde-7.07.0.0-1013.13~24.04.1UBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-53322
Ubuntu:26.04:LTSlinux-gcp7.0.0-1008.8UBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-gcp-7.07.0.0-1011.11~24.04.1UBUNTU-CVE-2026-53322
Ubuntu:26.04:LTSlinux-gke7.0.0-1003.4UBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-28.28~24.04.1UBUNTU-CVE-2026-53322
Ubuntu:26.04:LTSlinux-ibm7.0.0-1010.10UBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-53322
Ubuntu:26.04:LTSlinux-nvidia7.0.0-1016.16UBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-nvidia-7.07.0.0-1016.16~24.04.1UBUNTU-CVE-2026-53322
Ubuntu:26.04:LTSlinux-nvidia-bos7.0.0-2016.16UBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-53322
Ubuntu:26.04:LTSlinux-oem-7.07.0.0-1009.9UBUNTU-CVE-2026-53322
Ubuntu:26.04:LTSlinux-oracle7.0.0-1008.8UBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-oracle-7.07.0.0-1011.11~24.04.1UBUNTU-CVE-2026-53322
Ubuntu:26.04:LTSlinux-raspi7.0.0-1015.15UBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-53322
Ubuntu:26.04:LTSlinux-realtime7.0.0-28.28.1UBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-53322
Ubuntu:26.04:LTSlinux-riscv7.0.0-28.28.1UBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-53322
Ubuntu:24.04:LTSlinux-riscv-7.07.0.0-28.28.1~24.04.3UBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-53322
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-53322

Affected products (as reported)

VendorProductVersions
Linux Linux 5d74781ebc86c5fa9e9d6934024c505412de9b52 – before 4f1000a30f67cf7d328059242776a858611d5ef95d74781ebc86c5fa9e9d6934024c505412de9b52 – before d97708701434ce72968e771976aaf9d3438fcafd
Linux Linux 6.19

Weakness: CWE-826 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References