Go to homepageCyberStrike

Menu

Star on GitHub · 3.2k
Sign inDownload

CVE-2026-52953

7.1 · HIGH

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix oops due to out of scope access Below oops triggers when kill QEMU process: Oops: general protection fault,…

Published Jun 24, 2026CWE-125EPSS 0.13%

Overview

CVE-2026-52953 is a high-severity vulnerability. It was published on June 24, 2026 and has a CVSS 3.1 base score of 7.1 (HIGH).

This vulnerability has a CVSS 3.1 base score of 7.1, rated HIGH. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical description

In the Linux kernel, the following vulnerability has been resolved:

iommu/vt-d: Fix oops due to out of scope access

Below oops triggers when kill QEMU process:

Oops: general protection fault, probably for non-canonical address 0x7fffffff844eaaa7: 0000 [#1] SMP NOPTI

Call Trace:

<TASK>

do_raw_spin_lock+0xaa/0xc0

_raw_spin_lock_irqsave+0x21/0x40

domain_remove_dev_pasid+0x52/0x160

intel_nested_set_dev_pasid+0x1b9/0x1e0

__iommu_set_group_pasid+0x56/0x120

pci_dev_reset_iommu_done+0xe3/0x180

pcie_flr+0x65/0x160

__pci_reset_function_locked+0x5b/0x120

vfio_pci_core_close_device+0x63/0xe0 [vfio_pci_core]

vfio_df_close+0x4f/0xa0

vfio_df_unbind_iommufd+0x2d/0x60

vfio_device_fops_release+0x3e/0x40

__fput+0xe5/0x2c0

task_work_run+0x58/0xa0

do_exit+0x2c8/0x600

do_group_exit+0x2f/0xa0

get_signal+0x863/0x8c0

arch_do_signal_or_restart+0x24/0x100

exit_to_user_mode_loop+0x87/0x380

do_syscall_64+0x2ff/0x11e0

entry_SYSCALL_64_after_hw

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Refgit.kernel.org/stable/c/1e659db468476733d217c1314c1e0d9244356d6cRefgit.kernel.org/stable/c/88397fad7914ee74a7880fa5ce01f9eb6bfe0743Refgit.kernel.org/stable/c/a6dea58d8625c06b9654c0555f101742481335c3

How CyberStrike helps

Frequently asked questions

What is CVE-2026-52953?

CVE-2026-52953 is a high-severity vulnerability. It was published on June 24, 2026 and has a CVSS 3.1 base score of 7.1 (HIGH).

How severe is CVE-2026-52953?

This vulnerability has a CVSS 3.1 base score of 7.1, rated HIGH. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2026-52953?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2026-52953?

CyberStrike is an open-source, AI-augmented pentesting engine. Rather than flag a version number, it tests whether an issue like CVE-2026-52953 is actually reachable in your own applications and APIs, then verifies each finding before reporting it. That tells you if the weakness is a real, exploitable risk in your environment or a false positive you can safely deprioritize.

Related HIGH CVEs from 2026

View all
Browse by year2026202520242023202220212020201920182017201620152014201320122011201020092008200720062005200420032002200120001999