What is CVE-2026-53372?

CVE-2026-53372 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2026-07-19.

How severe is CVE-2026-53372?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Linux

CVE-2026-53372

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured, otherwise dirty pages would be lost.

EPSS: 0.001 (2.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Linux — versions 67f6f56b59126b3bf4fc6f4ea564e450fcfcf9f6, 6.13, 0
Linux Linux_kernel

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2026-53372?: CVE-2026-53372 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2026-07-19.
How severe is CVE-2026-53372?: Medium severity. CVSS v3 base score is 5.5 out of 10.