{"id":"CVE-2026-64290","summary":"iommufd: Break the loop on failure in iommufd_fault_fops_read()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\niommufd: Break the loop on failure in iommufd_fault_fops_read()\n\nOn a copy_to_user() failure inside the inner list_for_each_entry, only the\ninner loop breaks; the outer while re-fetches the just-restored fault group\nand retries the failing copy_to_user() forever, spinning the reader at 100%\nCPU with fault-\u003emutex held.\n\nCheck rc after the inner loop and break the outer while as well.","modified":"2026-08-18T03:30:55.740962038Z","published":"2026-07-25T08:49:30.049Z","related":["CGA-4hhq-cj6c-7h9m","openSUSE-SU-2026:11476-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64290.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/172fc8b19825a0f5884c38f2289188284e2d45ee"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5539da127d03c1f6c2e2a49fdfbe331a0ccbdea8"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a38e0714affc5c0bbb40cba5a65d6d32a5e72a71"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f66c16b175509642ee7082df57c9bf3deaebae1a"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64290.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64290"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"07838f7fd529c8a6de44b601d4b7057e6c8d36ed"},{"fixed":"a38e0714affc5c0bbb40cba5a65d6d32a5e72a71"},{"fixed":"5539da127d03c1f6c2e2a49fdfbe331a0ccbdea8"},{"fixed":"f66c16b175509642ee7082df57c9bf3deaebae1a"},{"fixed":"172fc8b19825a0f5884c38f2289188284e2d45ee"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64290.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.11.0"},{"fixed":"6.12.101"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.39"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.4"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64290.json"}}],"schema_version":"1.9.0"}