CVE-2026-53053
published 2026-06-24CVE-2026-53053: In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix clone_alias() to use the original device's devid Currently clone_alias()…
PriorityP344high8.8CVSS 3.1
AVLACLPRLUINSCCHIHAH
EPSS
0.13%
2.9th percentile
In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Fix clone_alias() to use the original device's devid
Currently clone_alias() assumes first argument (pdev) is always the
original device pointer. This function is called by
pci_for_each_dma_alias() which based on topology decides to send
original or alias device details in first argument.
This meant that the source devid used to look up and copy the DTE
may be incorrect, leading to wrong or stale DTE entries being
propagated to alias device.
Fix this by passing the original pdev as the opaque data argument to
both the direct clone_alias() call and pci_for_each_dma_alias(). Inside
clone_alias(), retrieve the original device from data and compute devid
from it.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 3332364e4ebc0581d133a334645a20fd13b580f1 < dbd76a537d8cb814e7f5b795ab21ecb7949c821d | dbd76a537d8cb814e7f5b795ab21ecb7949c821d |
| linux | linux | >= 3332364e4ebc0581d133a334645a20fd13b580f1 < 20b3c566e2702e5d4d0545be8a97029a2eebcc0e | 20b3c566e2702e5d4d0545be8a97029a2eebcc0e |
| linux | linux | >= 3332364e4ebc0581d133a334645a20fd13b580f1 < dae251ff11d2d2208a029f98923756831cefec46 | dae251ff11d2d2208a029f98923756831cefec46 |
| linux | linux | >= 3332364e4ebc0581d133a334645a20fd13b580f1 < faad224fe0f0857a04ff2eb3c90f0de57f47d0f3 | faad224fe0f0857a04ff2eb3c90f0de57f47d0f3 |
| linux | linux | >= 5.4.17 < 5.5 | 5.5 |
| linux | linux_kernel | — | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
vendor_redhat7.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: iommu/amd: Fix clone_alias() to use the original device's devid
vendor_redhat·2026-06-24·CVSS 7.0
CVE-2026-53053 [MEDIUM] CWE-694 kernel: iommu/amd: Fix clone_alias() to use the original device's devid
kernel: iommu/amd: Fix clone_alias() to use the original device's devid
In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Fix clone_alias() to use the original device's devid
Currently clone_alias() assumes first argument (pdev) is always the
original device pointer. This function is called by
pci_for_each_dma_alias() which based on topology decides to send
original or alias device details in first argument.
This meant that the source devid used to look up and copy the DTE
may be incorrect, leading to wrong or stale DTE entries being
propagated to alias device.
Fix this by passing the original pdev as the opaque data argument to
both the direct clone_alias() call and pci_for_each_dma_alias(). Inside
clone_alias(), retrieve the original device from data and com
GHSA
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix clone_alias() to use the original device's devid Currently clone_alias() assumes first argument (pdev) is always th
ghsa_unreviewed·2026-06-24
CVE-2026-53053 In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix clone_alias() to use the original device's devid Currently clone_alias() assumes first argument (pdev) is always th
In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Fix clone_alias() to use the original device's devid
Currently clone_alias() assumes first argument (pdev) is always the
original device pointer. This function is called by
pci_for_each_dma_alias() which based on topology decides to send
original or alias device details in first argument.
This meant that the source devid used to look up and copy the DTE
may be incorrect, leading to wrong or stale DTE entries being
propagated to alias device.
Fix this by passing the original pdev as the opaque data argument to
both the direct clone_alias() call and pci_for_each_dma_alias(). Inside
clone_alias(), retrieve the original device from data and compute devid
from it.
No detection rules found.
No public exploits indexed.
2026-06-24
Published