CVE-2026-53322 vfio/pci: Clean up DMABUFs before disabling function
A race condition in the Linux kernel VFIO PCI driver allows accessing disabled device memory, potentially leading to privilege escalation or data exposure.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-53322?
CVE-2026-53322 is a high-severity vulnerability in Linux kernel, published on 26 Jun 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
vfio/pci: Clean up DMABUFs before disabling function
On device shutdown, make vfio_pci_core_close_device() call vfio_pci_dma_buf_cleanup() before the function is disabled via vfio_pci_core_disable(). This ensures that all access via DMABUFs is revoked before the function's BARs become inaccessible.
This fixes an issue where, if the function is disabled first, a tiny window exists in which the function's MSE is cleared and yet BARs could still be accessed via the DMABUF. The resources would also be freed and up for grabs by a different driver.
Which versions are affected by CVE-2026-53322?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-53322?
Apply the vendor's patch.
Is CVE-2026-53322 being exploited?
There is no known exploitation of CVE-2026-53322 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2026-53322, GHSA-rj34-crxv-j5mg, UBUNTU-CVE-2026-53322.