CVE-2024-26786

In the Linux kernel, the following vulnerability has been resolved:

iommufd: Fix iopt_access_list_id overwrite bug

The Linux kernel CVE team has assigned CVE-2024-26786 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024040459-CVE-2024-26786-802f@gregkh/T

This vulnerability is rated as having Low severity for Red Hat Enterprise Linux because exploitation requires local system access and only triggers a kernel warning without enabling privilege escalation or arbitrary code execution. The flaw arises from premature identifier assignment in the iommufd subsystem during an error condition when registering I/O page table access. Because the bug is confined to an error cleanup path and produces a non-fatal warning upon object destruction, typical enterprise environments face minimal operational risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.