CVE-2026-64153: drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-19 · updated 2026-08-17

Description

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN Commit "iommu: return full error code from iommu_map_sg[_atomic]()" changed iommu_map_sgtable() to return an ssize_t and negative values in error cases, rather than a size_t and a zero. Store the return value in the appropriate type and in case of error, return it rather than WARNing. Patchwork: https://patchwork.freedesktop.org/patch/719685/

Affected products

Linux kernel: from 5.15 before 5.15.209; from 5.16 before 6.1.175; from 6.2 before 6.6.142; from 6.7 before 6.12.92; from 6.13 before 6.18.34; from 6.19 before 7.0.11 — fixed in 5.15.209, 6.1.175, 6.12.92, 6.18.34, 6.6.142, 7.0.11

How to fix

Upgrade to a fixed version: Linux kernel 5.15.209, 6.1.175, 6.12.92, 6.18.34. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-64153 or the next vulnerability affects your stack