CVE-2026-53053— iommu/amd: Fix clone_alias() to use the original device's devid
Possible ATT&CK Techniques 1AI
T1068 · Exploitation for Privilege EscalationAffected Version Matrix 12
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 3332364e4ebc0581d133a334645a20fd13b580f1< dbd76a537d8cb814e7f5b795ab21ecb7949c821d | affected |
3332364e4ebc0581d133a334645a20fd13b580f1< 20b3c566e2702e5d4d0545be8a97029a2eebcc0e | affected | ||
3332364e4ebc0581d133a334645a20fd13b580f1< dae251ff11d2d2208a029f98923756831cefec46 | affected | ||
3332364e4ebc0581d133a334645a20fd13b580f1< faad224fe0f0857a04ff2eb3c90f0de57f47d0f3 | affected | ||
1f03a258f20f1699ede29bb40804074db9398a0d | affected | ||
5.4.17< 5.5 | affected | ||
5.5 | affected | ||
< 5.5 | unaffected | ||
| … +4 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-53053
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
iommu/amd: Fix clone_alias() to use the original device's devid
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix clone_alias() to use the original device's devid Currently clone_alias() assumes first argument (pdev) is always the original device pointer. This function is called by pci_for_each_dma_alias() which based on topology decides to send original or alias device details in first argument. This meant that the source devid used to look up and copy the DTE may be incorrect, leading to wrong or stale DTE entries being propagated to alias device. Fix this by passing the original pdev as the opaque data argument to both the direct clone_alias() call and pci_for_each_dma_alias(). Inside clone_alias(), retrieve the original device from data and compute devid from it.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会开源的操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于clone_alias()函数在获取原设备的devid时可能使用错误的源设备标识，导致DTE条目传播错误或过时，可能引起别名设备使用错误的或过时的DTE条目。以下版本受到影响：5.5版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-53053
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-53053
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-53053 (4)
Same Patch Batch · Linux · 2026-06-24 · 219 CVEs total
| CVE-2026-53002 | 9.8 CRITICAL | netfilter: conntrack: remove sprintf usage |
| CVE-2026-52986 | 9.8 CRITICAL | netfilter: nf_conntrack_sip: don't use simple_strtoul |
| CVE-2026-52982 | 9.8 CRITICAL | net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() |
| CVE-2026-52989 | 9.8 CRITICAL | nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers |
| CVE-2026-53086 | 9.8 CRITICAL | net: bcmgenet: fix racing timeout handler |
| CVE-2026-52993 | 9.8 CRITICAL | tipc: fix double-free in tipc_buf_append() |
| CVE-2026-53045 | 9.8 CRITICAL | memory: tegra124-emc: Fix dll_change check |
| CVE-2026-52955 | 9.8 CRITICAL | libceph: Fix potential out-of-bounds access in crush_decode() |
| CVE-2026-53046 | 9.8 CRITICAL | ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine |
| CVE-2026-53049 | 9.8 CRITICAL | gfs2: add some missing log locking |
| CVE-2026-53088 | 9.8 CRITICAL | net: bcmgenet: fix off-by-one in bcmgenet_put_txcb |
| CVE-2026-52931 | 9.8 CRITICAL | batman-adv: tp_meter: avoid use of uninit sender vars |
| CVE-2026-53055 | 9.8 CRITICAL | crypto: hisilicon/sec2 - prevent req used-after-free for sec |
| CVE-2026-52924 | 9.8 CRITICAL | sctp: purge outqueue on stale COOKIE-ECHO handling |
| CVE-2026-53010 | 9.8 CRITICAL | ksmbd: fix use-after-free in smb2_open during durable reconnect |
| CVE-2026-52914 | 9.8 CRITICAL | batman-adv: fix fragment reassembly length accounting |
| CVE-2026-53006 | 9.8 CRITICAL | ipv6: fix possible UAF in icmpv6_rcv() |
| CVE-2026-52999 | 9.1 CRITICAL | netfilter: nfnetlink_osf: fix out-of-bounds read on option matching |
| CVE-2026-53043 | 9.1 CRITICAL | ocfs2/dlm: validate qr_numregions in dlm_match_regions() |
| CVE-2026-52958 | 9.1 CRITICAL | libceph: Fix potential out-of-bounds access in osdmap_decode() |
Showing top 20 of 219 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-53362
ipv6: account for fraggap on the paged allocation path - CVE-2026-53361
af_unix: Set gc_in_progress to true in unix_gc(). - CVE-2026-53360
KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use - CVE-2026-53359
KVM: x86: Fix shadow paging use-after-free due to unexpected - CVE-2026-53358
Bluetooth: L2CAP: use chan timer to close channels in cleanu
Same vendor: Linux
- CVE-2026-53362
ipv6: account for fraggap on the paged allocation path - CVE-2026-53361
af_unix: Set gc_in_progress to true in unix_gc(). - CVE-2026-53360
KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use - CVE-2026-53359
KVM: x86: Fix shadow paging use-after-free due to unexpected - CVE-2026-53358
Bluetooth: L2CAP: use chan timer to close channels in cleanu
V. Comments for CVE-2026-53053
No comments yet