Improper control of a resource through its lifetime in Linux kernel - CVE-2026-31735

Vulnerability details

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper invalidation handling in the iommu unmap gather logic when unmapping a range that ends within the middle of a large or contiguous IOPTE. A local user can trigger an unmap operation in this condition to cause a denial of service.

The issue results from the invalidation range not being extended to cover the full unmapped area when unmap removes more memory than was originally requested.

Affected software

How to mitigate CVE-2026-31735

External References

• https://git.kernel.org/stable/c/50ecd96a28f712f8b682c0441f4cb9b086d28816
• https://git.kernel.org/stable/c/ee6e69d032550687a3422504bfca3f834c7b5061

Related Security Bulletins

• Improper control of a resource through its lifetime in Linux kernel iommu generic_pt driver