Review reviewHigh

CVE-2026-52953

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix oops due to out of scope access Below oops triggers when kill QEMU process: Oops: general protection fault, probably for non-canonical address 0x7fffffff844eaaa7: 0000 [#1] SMP NOPTI Call Trace: <TASK> do_raw_spin_lock+0xaa/0xc0 _raw_spin_lock_irqsave+0x21/0x40 domain_remove_dev_pasid+0x52/0x160 intel_nested_set_dev_pasid+0x1b9/0x1e0 __iommu_set_group_pasid+0x56/0x120 pci_dev_reset_iommu_done+0xe3/0x180 pcie_flr+0x65/0x160 __pci_reset_function_locked+0x5b/0x120 vfio_pci_core_close_device+0x63/0xe0 [vfio_pci_...

CVSS: 7.1
EPSS: 0.13%
CISA KEV: Not listed
Published: 2026.06.25

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.13%

Technical severityCVSS 7.1

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= 7d0c9da6c1509664d96488042bacc02308ca33b2 < 88397fad7914ee74a7880fa5ce01f9eb6bfe0743, >= 7d0c9da6c1509664d96488042bacc02308ca33b2 < 1e659db468476733d217c1314c1e0d9244356d6c, >= 7d0c9da6c1509664d96488042bacc02308ca33b2 < a6dea58d8625c06b9654c0555f101742481335c3, >= 6.6, >= 6.6 < 6.18.33, >= 6.19 < 7.0.10, 7.1
Fixed versions: 6.18.33, 7.0.10

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CWE: CWE-125