{ "cveId": "CVE-2026-52953", "url": "https://patchblox.com/security/cve/CVE-2026-52953", "summary": "CVE-2026-52953 is fixed in 34 products on 1 platform, first by ALAS2023-2026-1866, released June 22, 2026. It is not reported as exploited. Patch Radar priority: High.", "title": "iommu/vt-d: Fix oops due to out of scope access", "description": "In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix oops due to out of scope access Below oops triggers when kill QEMU process: Oops: general protection fault, probably for non-canonical address 0x7fffffff844eaaa7: 0000 [#1] SMP NOPTI Call Trace: \u003CTASK\u003E do_raw_spin_lock\u002B0xaa/0xc0 _raw_spin_lock_irqsave\u002B0x21/0x40 domain_remove_dev_pasid\u002B0x52/0x160 intel_nested_set_dev_pasid\u002B0x1b9/0x1e0 __iommu_set_group_pasid\u002B0x56/0x120 pci_dev_reset_iommu_done\u002B0xe3/0x180 pcie_flr\u002B0x65/0x160 __pci_reset_function_locked\u002B0x5b/0x120 vfio_pci_core_close_device\u002B0x63/0xe0 [vfio_pci_core] vfio_df_close\u002B0x4f/0xa0 vfio_df_unbind_iommufd\u002B0x2d/0x60 vfio_device_fops_release\u002B0x3e/0x40 __fput\u002B0xe5/0x2c0 task_work_run\u002B0x58/0xa0 do_exit\u002B0x2c8/0x600 do_group_exit\u002B0x2f/0xa0 get_signal\u002B0x863/0x8c0 arch_do_signal_or_restart\u002B0x24/0x100 exit_to_user_mode_loop\u002B0x87/0x380 do_syscall_64\u002B0x2ff/0x11e0 entry_SYSCALL_64_after_hwframe\u002B0x76/0x7e The global static blocked domain is a dummy domain without corresponding dmar_domain structure, accessing beyond iommu_domain structure triggers oops easily. Fix it by return early in domain_remove_dev_pasid() like identity domain.", "published": "2026-06-22T09:00:00Z", "severity": "Moderate", "cvss": 7.1, "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "epss": 0.00134, "epssPercentile": 0.02903, "priority": "High", "priorityTier": 3, "exploited": false, "vendorExploited": false, "disclosed": false, "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52953", "fixes": [ { "platform": "linux", "product": "bpftool6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.33-63.124.amzn2023", "fix": "ALAS2023-2026-1866", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1866", "released": "2026-06-22T09:00:00Z" }, { "platform": "linux", "product": "bpftool6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.33-63.124.amzn2023", "fix": "ALAS2023-2026-1866", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1866", "released": "2026-06-22T09:00:00Z" }, { "platform": "linux", "product": "dtb-aarch64", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.37.1", "fix": "OPENSUSE-SU-2026:21555-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21555-1", "released": "2026-08-12T01:09:28Z" }, { "platform": "linux", "product": "kernel-64kb", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.37.1", "fix": "OPENSUSE-SU-2026:21555-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21555-1", "released": "2026-08-12T01:09:28Z" }, { "platform": "linux", "product": "kernel-64kb", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.73.2", "fix": "SUSE-SU-2026:3166-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3166-1", "released": "2026-07-21T17:09:27Z" }, { "platform": "linux", "product": "kernel-64kb", "release": "sles 16.0", "fixedVersion": "6.12.0-160000.37.1", "fix": "SUSE-SU-2026:23231-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23231-1", "released": "2026-08-11T21:26:34Z" }, { "platform": "linux", "product": "kernel-azure", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.37.1", "fix": "OPENSUSE-SU-2026:21555-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21555-1", "released": "2026-08-12T01:09:28Z" }, { "platform": "linux", "product": "kernel-azure", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.73.2", "fix": "SUSE-SU-2026:3166-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3166-1", "released": "2026-07-21T17:09:27Z" }, { "platform": "linux", "product": "kernel-azure", "release": "sles 16.0", "fixedVersion": "6.12.0-160000.37.1", "fix": "SUSE-SU-2026:23231-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23231-1", "released": "2026-08-11T21:26:34Z" }, { "platform": "linux", "product": "kernel-default", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.37.1", "fix": "OPENSUSE-SU-2026:21555-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21555-1", "released": "2026-08-12T01:09:28Z" }, { "platform": "linux", "product": "kernel-default", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.73.2", "fix": "SUSE-SU-2026:3166-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3166-1", "released": "2026-07-21T17:09:27Z" }, { "platform": "linux", "product": "kernel-default", "release": "sles 16.0", "fixedVersion": "6.12.0-160000.37.1", "fix": "SUSE-SU-2026:23237-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23237-1", "released": "2026-08-11T21:34:22Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.37.1.160000.2.19", "fix": "OPENSUSE-SU-2026:21555-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21555-1", "released": "2026-08-12T01:09:28Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.73.2.150700.17.41.4", "fix": "SUSE-SU-2026:3166-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3166-1", "released": "2026-07-21T17:09:27Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "sles 16.0", "fixedVersion": "6.12.0-160000.37.1.160000.2.19", "fix": "SUSE-SU-2026:23231-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23231-1", "released": "2026-08-11T21:26:34Z" }, { "platform": "linux", "product": "kernel-docs", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.37.1", "fix": "OPENSUSE-SU-2026:21555-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21555-1", "released": "2026-08-12T01:09:28Z" }, { "platform": "linux", "product": "kernel-docs", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.73.1", "fix": "SUSE-SU-2026:3166-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3166-1", "released": "2026-07-21T17:09:27Z" }, { "platform": "linux", "product": "kernel-docs", "release": "sles 16.0", "fixedVersion": "6.12.0-160000.37.1", "fix": "SUSE-SU-2026:23231-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23231-1", "released": "2026-08-11T21:26:34Z" }, { "platform": "linux", "product": "kernel-kvmsmall", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.37.1", "fix": "OPENSUSE-SU-2026:21555-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21555-1", "released": "2026-08-12T01:09:28Z" }, { "platform": "linux", "product": "kernel-kvmsmall", "release": "sles 16.0", "fixedVersion": "6.12.0-160000.37.1", "fix": "SUSE-SU-2026:23231-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23231-1", "released": "2026-08-11T21:26:34Z" }, { "platform": "linux", "product": "kernel-livepatch-6.18.33-63.124", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "fix": "ALAS2023-2026-1866", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1866", "released": "2026-06-22T09:00:00Z" }, { "platform": "linux", "product": "kernel-livepatch-SLE15-SP7-RT_Update_18", "release": "sles 15.7", "fixedVersion": "1-150700.1.5.1", "fix": "SUSE-SU-2026:3130-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3130-1", "released": "2026-07-20T12:25:31Z" }, { "platform": "linux", "product": "kernel-livepatch-SLE15-SP7_Update_19", "release": "sles 15.7", "fixedVersion": "1-150700.15.3.4", "fix": "SUSE-SU-2026:3166-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3166-1", "released": "2026-07-21T17:09:27Z" }, { "platform": "linux", "product": "kernel-obs-build", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.37.1", "fix": "OPENSUSE-SU-2026:21555-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21555-1", "released": "2026-08-12T01:09:28Z" }, { "platform": "linux", "product": "kernel-obs-build", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.73.2", "fix": "SUSE-SU-2026:3166-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3166-1", "released": "2026-07-21T17:09:27Z" }, { "platform": "linux", "product": "kernel-obs-qa", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.37.1", "fix": "OPENSUSE-SU-2026:21555-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21555-1", "released": "2026-08-12T01:09:28Z" }, { "platform": "linux", "product": "kernel-obs-qa", "release": "sles 16.0", "fixedVersion": "6.12.0-160000.37.1", "fix": "SUSE-SU-2026:23231-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23231-1", "released": "2026-08-11T21:26:34Z" }, { "platform": "linux", "product": "kernel-rt", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.37.1", "fix": "OPENSUSE-SU-2026:21555-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21555-1", "released": "2026-08-12T01:09:28Z" }, { "platform": "linux", "product": "kernel-source", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.37.1", "fix": "OPENSUSE-SU-2026:21555-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21555-1", "released": "2026-08-12T01:09:28Z" }, { "platform": "linux", "product": "kernel-source", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.73.1", "fix": "SUSE-SU-2026:3166-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3166-1", "released": "2026-07-21T17:09:27Z" }, { "platform": "linux", "product": "kernel-source", "release": "sles 16.0", "fixedVersion": "6.12.0-160000.37.1", "fix": "SUSE-SU-2026:23231-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23231-1", "released": "2026-08-11T21:26:34Z" }, { "platform": "linux", "product": "kernel-syms", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.37.1", "fix": "OPENSUSE-SU-2026:21555-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21555-1", "released": "2026-08-12T01:09:28Z" }, { "platform": "linux", "product": "kernel-syms", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.73.1", "fix": "SUSE-SU-2026:3166-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3166-1", "released": "2026-07-21T17:09:27Z" }, { "platform": "linux", "product": "kernel-syms", "release": "sles 16.0", "fixedVersion": "6.12.0-160000.37.1", "fix": "SUSE-SU-2026:23231-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23231-1", "released": "2026-08-11T21:26:34Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.37.1", "fix": "OPENSUSE-SU-2026:21555-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21555-1", "released": "2026-08-12T01:09:28Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.73.2", "fix": "SUSE-SU-2026:3166-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3166-1", "released": "2026-07-21T17:09:27Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "sles 16.0", "fixedVersion": "6.12.0-160000.37.1", "fix": "SUSE-SU-2026:23231-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23231-1", "released": "2026-08-11T21:26:34Z" }, { "platform": "linux", "product": "kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.33-63.124.amzn2023", "fix": "ALAS2023-2026-1866", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1866", "released": "2026-06-22T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.33-63.124.amzn2023", "fix": "ALAS2023-2026-1866", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1866", "released": "2026-06-22T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.18.33-63.124.amzn2023", "fix": "ALAS2023-2026-1866", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1866", "released": "2026-06-22T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-debuginfo-common-x86_64", "release": "amzn 2023", "fixedVersion": "1:6.18.33-63.124.amzn2023", "fix": "ALAS2023-2026-1866", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1866", "released": "2026-06-22T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.33-63.124.amzn2023", "fix": "ALAS2023-2026-1866", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1866", "released": "2026-06-22T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-headers", "release": "amzn 2023", "fixedVersion": "1:6.18.33-63.124.amzn2023", "fix": "ALAS2023-2026-1866", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1866", "released": "2026-06-22T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.18.33-63.124.amzn2023", "fix": "ALAS2023-2026-1866", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1866", "released": "2026-06-22T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.18.33-63.124.amzn2023", "fix": "ALAS2023-2026-1866", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1866", "released": "2026-06-22T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-tools", "release": "amzn 2023", "fixedVersion": "1:6.18.33-63.124.amzn2023", "fix": "ALAS2023-2026-1866", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1866", "released": "2026-06-22T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.33-63.124.amzn2023", "fix": "ALAS2023-2026-1866", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1866", "released": "2026-06-22T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.33-63.124.amzn2023", "fix": "ALAS2023-2026-1866", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1866", "released": "2026-06-22T09:00:00Z" }, { "platform": "linux", "product": "linux", "release": "Debian 14", "fixedVersion": "7.0.10-1", "fix": "DEBIAN-CVE-2026-52953", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-52953", "released": "2026-06-25T17:23:13Z" }, { "platform": "linux", "product": "perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.33-63.124.amzn2023", "fix": "ALAS2023-2026-1866", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1866", "released": "2026-06-22T09:00:00Z" }, { "platform": "linux", "product": "perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.33-63.124.amzn2023", "fix": "ALAS2023-2026-1866", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1866", "released": "2026-06-22T09:00:00Z" }, { "platform": "linux", "product": "python3-perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.33-63.124.amzn2023", "fix": "ALAS2023-2026-1866", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1866", "released": "2026-06-22T09:00:00Z" }, { "platform": "linux", "product": "python3-perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.33-63.124.amzn2023", "fix": "ALAS2023-2026-1866", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1866", "released": "2026-06-22T09:00:00Z" } ], "noFixYet": [], "dataAsOf": "2026-11-09T01:18:40Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }