Dashboard / CVE-2026-53372

CVE-2026-53372

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-07-19 Modified: 2026-11-06 First seen: 2026-11-06 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured, otherwise dirty pages would be lost.

Affected Software (5)

VendorProductVersion
Linux Linux 67f6f56b59126b3bf4fc6f4ea564e450fcfcf9f6 < 3ea9ce757bd3de955b56e7bc5672fc479e40b045
Linux Linux 67f6f56b59126b3bf4fc6f4ea564e450fcfcf9f6 < 9009c1af5458322469fa9a4371081a4449c5947d
Linux Linux 67f6f56b59126b3bf4fc6f4ea564e450fcfcf9f6 < cc5bd898ff70710ffc41cd8e5c2741cb64750047
Linux Linux 6.13
linux linux_kernel 6.13 – 6.18.30

References & Advisories (3)

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.16%
Raw Score 0.001600
Percentile 5.2%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00160
2026-11-12
0.00160
2026-11-10
0.00160
2026-11-09
0.00160
2026-11-08
0.00160
2026-11-07
0.00160
2026-11-06
0.00160

Intelligence Sources

mitre ref →
nvd ref →

External Links