CVE-2026-64151
In the Linux kernel, the following vulnerability has been resolved: iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap Sashiko pointed out that the driver could drop PAGE_SIZE from the pgsize_bitmap. That is technically allowed but nothing does it, and such an iommu_domain would not be used with the DMA API today. Still, it is against the design and it is trivial to fix up. Lift the PT_WARN_ON to the if branch and just skip the fast path.
Affected versions
Linux kernel versions
6.19
and later are affected. Fixed in
7.0.11,
7.1
and their respective stable series.
References
2 totalFrequently asked questions
-
What is CVE-2026-64151?
CVE-2026-64151 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.19 onward and has been patched in 7.0.11 and 7.1. CVE-2026-64151 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-64151?
Yes — CVE-2026-64151 has been patched. Fixed versions include 7.0.11 and 7.1. If you are running Linux kernel 6.19 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-64151 actively exploited?
No — CVE-2026-64151 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.