CVE-2026-64153

drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN

HIGH
8.8
CVSS Score
Published: July 19, 2026 at 03:40 PM UTC
Updated: August 17, 2026 at 05:25 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH8.8
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN Commit "iommu: return full error code from iommu_map_sg[_atomic]()" changed iommu_map_sgtable() to return an ssize_t and negative values in error cases, rather than a size_t and a zero. Store the return value in the appropriate type and in case of error, return it rather than WARNing. Patchwork: https://patchwork.freedesktop.org/patch/719685/

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.15 ≤ v < 5.15.2095.15 ≤ v < 6.1.1755.15 ≤ v < 6.12.925.15 ≤ v < 6.18.345.15 ≤ v < 6.6.1425.15 ≤ v < 7.0.115.15 ≤ v < 7.15.16 ≤ v < 6.1.1756.13 ≤ v < 6.18.346.19 ≤ v < 7.0.116.2 ≤ v < 6.6.1426.7 ≤ v < 6.12.927.1 rc17.1 rc27.1 rc37.1 rc4ad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b
Vendor states this is fixed in 3457807aeb88077712f0a7cb65c3ca5120773d75 (fixed)
Vendor states this is fixed in 3a45af37733446e114bf19b0209fe7d8089bdb8b (fixed)
Vendor states this is fixed in 3c2cdb7c07f664b77e2a75b50793b845d5742efa (fixed)
Vendor states this is fixed in 3e3c3c95ef4fe17231a9149e27bcfc9dae2dd89f (fixed)
Vendor states this is fixed in 55e0f0d1c1a4ee1e46da7da4d443eb3044fb3851 (fixed)
Vendor states this is fixed in 7256e54583aee21e23929e7554278c2f5c1a08b1 (fixed)
Vendor states this is fixed in f4e37f3df436c2bdd2621c21f9c72c8f149a221d (fixed)
Vendor states this is fixed in 5.15 (unaffected)
Vendor states this is fixed in 5.15.209 (unaffected)
Vendor states this is fixed in 6.1.175 (unaffected)
Vendor states this is fixed in 6.12.92 (unaffected)
Vendor states this is fixed in 6.18.34 (unaffected)
Vendor states this is fixed in 6.6.142 (unaffected)
Vendor states this is fixed in 7.0.11 (unaffected)
Vendor states this is fixed in 7.1 (unaffected)

CVSS

8.8HIGHLinux
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card