https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 14:33:06 +0000 https://vulnerability.circl.lu/vuln/cve-2026-74573 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE</p> <p>arm_vsmmu_vsid_to_sid() maps a guest&#39;s vSID to a single physical Stream ID taken from master-&gt;streams[0], assuming a device has exactly one stream. A device with several streams gets only its first one mapped, so a guest vSID invalidation cannot reach the others&#39; ATC and IOTLB entries; a device with none makes master-&gt;streams a ZERO_SIZE_PTR, read out of bounds.</p> <p>Add an arm_vsmmu_vdevice_init() op to reject the vDEVICE with -EOPNOTSUPP when master-&gt;num_streams is not one, rather than mapping it silently.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE</p> <p>arm_vsmmu_vsid_to_sid() maps a guest&#39;s vSID to a single physical Stream ID taken from master-&gt;streams[0], assuming a device has exactly one stream. A device with several streams gets only its first one mapped, so a guest vSID invalidation cannot reach the others&#39; ATC and IOTLB entries; a device with none makes master-&gt;streams a ZERO_SIZE_PTR, read out of bounds.</p> <p>Add an arm_vsmmu_vdevice_init() op to reject the vDEVICE with -EOPNOTSUPP when master-&gt;num_streams is not one, rather than mapping it silently.</p> https://vulnerability.circl.lu/vuln/cve-2026-74573