CVE-2026-74573
In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE arm_vsmmu_vsid_to_sid() maps a guest's vSID to a single physical Stream ID taken from master->streams[0], assuming a device has exactly one stream. A device with several streams gets only its first one mapped, so a guest vSID invalidation cannot reach the others' ATC and IOTLB entries; a device with none makes master->streams a ZERO_SIZE_PTR, read out of bounds. Add an arm_vsmmu_vdevice_init() op to reject the vDEVICE with -EOPNOTSUPP when master->num_streams is not one, rather than mapping it silently.
Affected versions
Linux kernel versions
6.13
and later are affected. Fixed in
6.18.44,
7.1.8,
7.2-rc6
and their respective stable series.
References
3 totalFrequently asked questions
-
What is CVE-2026-74573?
CVE-2026-74573 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.13 onward and has been patched in 6.18.44, 7.1.8 and 7.2-rc6. CVE-2026-74573 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-74573?
Yes. CVE-2026-74573 has been patched. Fixed versions include 6.18.44, 7.1.8 and 7.2-rc6. If you are running Linux kernel 6.13 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-74573 actively exploited?
No. CVE-2026-74573 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.