CVE-2026-53322Disclosure(linux / linux_kernel)

LOWCVSS 8.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch linux linux_kernel systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Clean up DMABUFs before disabling function On device shutdown, make vfio_pci_core_close_device() call vfio_pci_dma_buf_cleanup() before the function is disabled via vfio_pci_core_disable(). This ensures that all access via DMABUFs is revoked before the function's BARs become inaccessible. This fixes an issue where, if the function is disabled first, a tiny window exists in which the function's MSE is cleared and yet BARs could still be accessed via the DMABUF. The resources would also be freed and up for grabs by a different driver.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-415CWE-826

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Vendors
Products
linux_kernel

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-06-27: 2Patch / Workaround · 2026-06-27: 1Technical Details · 2026-06-27: 206-27
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-53322 In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Clean up DMABUFs before disabling function On device shutdown, make vfio_pci_core_clos… https://www.cve.org/CVERecord?id=CVE-2026-53322 ----- Traducción: CVE-2026-53322 En … http://infoflow.cloud`

    Post summary

    The notice informs that CVE‑2026‑53322, a Linux kernel issue involving DMABUF cleanup, has been fixed; no PoC, exploit, or active use is referenced.

    0000034
    89 followersView on X
  • CVE@CVEnew
    Patch

    CVE-2026-53322 In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Clean up DMABUFs before disabling function On device shutdown, make vfio_pci_core_clos… https://www.cve.org/CVERecord?id=CVE-2026-53322

    Post summary

    The CVE-2026-53322 vulnerability in the Linux kernel has been fixed by adding a cleanup step for DMABUFs before disabling the function, confirming patch availability.

    00000827
    57.7K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---

Explore more