{
  "cveId": "CVE-2026-74328",
  "url": "https://patchblox.com/security/cve/CVE-2026-74328",
  "summary": "CVE-2026-74328 is fixed in linux on 1 platform by DEBIAN-CVE-2026-74328 (version 7.1.5-1), released August 15, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  iommufd: Destroy the pages content after detachi...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  iommufd: Destroy the pages content after detaching from dmabuf  Sashiko points out this has gotten out of order, the mutex could still be in use through the dmabuf invalidation callbacks. Don\u0027t destroy any of the pages content until the dmabuf is fully detached.",
  "published": "2026-08-15T06:22:33Z",
  "severity": "high",
  "cvss": 8.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
  "epss": 0.00165,
  "epssPercentile": 0.05749,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.1.5-1",
      "fix": "DEBIAN-CVE-2026-74328",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-74328",
      "released": "2026-08-15T22:38:55Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-10T07:50:38Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}