CVE-2026-80633

A flaw was found in the Linux kernel's iommufd component. A local user could trigger a kernel warning by releasing the last reference on a Direct Memory Access Buffer (DMABUF)-backed IOMMU page table without holding the necessary dma_resv lock. This missing lock operation can lead to system instability or a denial of service.

This vulnerability is rated as having Moderate impact because exploitation is constrained to authenticated local users interacting with iommufd interfaces and the issue results in kernel instability or denial of service without permitting direct privilege escalation. Supported Red Hat Enterprise Linux releases are not affected, as the underlying buffer handling code introduced in upstream kernels is not present in shipped products.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.