CVE-2026-90387

A flaw was found in the swiotlb component of the Linux kernel. When CONFIG_DMA_DIRECT_REMAP is enabled, the swiotlb_init_io_tlb_pool() function incorrectly reconstructs the virtual address for dynamic memory pools. This error causes swiotlb_free_tlb() to fail in recognizing allocated memory chunks, potentially leading to memory corruption or resource exhaustion. A local attacker could exploit this to impact system stability.

Red Hat has evaluated this issue as having a Low security impact because triggering the defect requires local access and relies on specialized kernel DMA configurations involving remapped atomic allocations. Under standard enterprise operations, unprivileged users cannot directly invoke the affected DMA deallocation routine, restricting the realistic threat profile. Furthermore, the consequence is primarily limited to resource leaks and denial of service rather than arbitrary code execution or unauthorized data exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.