CVE-2026-53322
CVE-2026-53322: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Red Hat
1 advisory- Advisory severityHigh7.0
High [CVE-2026-53322] Clean up DMABUFs before disabling function
CVE-2026-53322Source published Source updated
In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Clean up DMABUFs before disabling function On device shutdown, make vfio_pci_core_close_device() call vfio_pci_dma_buf_cleanup() before the function is disabled via vfio_pci_core_disable(). This ensures that all access via DMABUFs is revoked before the function's BARs become inaccessible. This fixes an issue where, if the function is disabled first, a tiny window exists in which the function's MSE is cleared and yet BARs could still be accessed via the DMABUF. The resources would also be freed and up for grabs by a different driver. During device shutdown, an improper order of operations in cleaning up Direct Memory Access Buffers (DMABUFs) before disabling the function creates a brief window. In this window, a…
- Affected products in this advisory
- Red Hat Enterprise Linux 10
- Red Hat package: kernel
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- kernel-0:6.12.0-211.53.1.el10_2
- RHSA-2026:65334
- Mitigation guidance
- To mitigate this issue, if PCI device passthrough is not required, the `vfio_pci` kernel module can be blacklisted to prevent it from loading. This can be achieved by creating a file such as `/etc/modprobe.d/blacklist-vfio-pci.conf` with the content `blacklist vfio_pci`. A system reboot is required for this change to take effect. Disabling this module may impact functionality that relies on PCI device passthrough.
Android app · Google Play
Monitor future Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.