SB20260625120 - Improper access control in Linux kernel iommu riscv driver

Description

This security bulletin contains information about 1 vulnerability.

1) Improper access control (CVE-ID: CVE-2026-53057)

CWE-ID: CWE-284 - Improper Access Control

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local user to bypass IOMMU memory translation updates.

The vulnerability exists due to improper access control in the RISC-V IOMMU IODIR update handling when updating DDT or PDT entries without performing required IOTINVAL invalidations. A local user can trigger device context updates to bypass IOMMU memory translation updates.

The issue affects the RISC-V IOMMU implementation and arises because required TLB and context cache invalidations were not performed after directory entry updates.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/3f917d9bff68600f77561900f3145bd4706dc840
• https://git.kernel.org/stable/c/d99d1c13faa793ff1abab0d20ab6473c838081b3
• https://git.kernel.org/stable/c/f5c262b544975e067ea265fc7403aefbbea8563e