CVE-2026-80894: In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix wrong hwpt passed to iommufd_auto_resp
Summary
A bug was found in the Linux kernel's iommufd (input/output memory management unit file descriptor) module where the wrong hardware page table (hwpt, a data structure that manages memory translations) was being passed to a function that handles device faults. The function was receiving the new hwpt along with an old device handle, but it should have received the old hwpt instead, causing it to look for fault data in the wrong location.
Solution / Mitigation
Fix this by passing "old" instead of "hwpt" as the first argument to iommufd_auto_response_faults() in the iommufd_hwpt_replace_device() function.
Vulnerability Details
EPSS: 0.0%
September 4, 2026
Classification
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-80894
First tracked: September 4, 2026 at 08:08 PM
Classified by LLM (prompt v3) · confidence: 95%