---
id: CVE-2026-53053
title: 'iommu/amd: Fix clone_alias() to use the original device''s devid'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  iommu/amd: Fix clone_alias() to use the original device's devid

  Currently clone_alias() assumes first argument (pdev) is always the
  original device pointer. This funct…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 3332364e4ebc0581d133a334645a20fd13b580f1 <
    dbd76a537d8cb814e7f5b795ab21ecb7949c821d
  - >-
    Linux >= 3332364e4ebc0581d133a334645a20fd13b580f1 <
    20b3c566e2702e5d4d0545be8a97029a2eebcc0e
  - >-
    Linux >= 3332364e4ebc0581d133a334645a20fd13b580f1 <
    dae251ff11d2d2208a029f98923756831cefec46
  - >-
    Linux >= 3332364e4ebc0581d133a334645a20fd13b580f1 <
    faad224fe0f0857a04ff2eb3c90f0de57f47d0f3
  - Linux 1f03a258f20f1699ede29bb40804074db9398a0d
  - Linux >= 5.4.17 < 5.5
  - Linux 5.5
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T15:24:56.208597Z'
published: '2026-06-24'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T15:31:29.790Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-53053'
references:
  - url: 'https://git.kernel.org/stable/c/dbd76a537d8cb814e7f5b795ab21ecb7949c821d'
  - url: 'https://git.kernel.org/stable/c/20b3c566e2702e5d4d0545be8a97029a2eebcc0e'
  - url: 'https://git.kernel.org/stable/c/dae251ff11d2d2208a029f98923756831cefec46'
  - url: 'https://git.kernel.org/stable/c/faad224fe0f0857a04ff2eb3c90f0de57f47d0f3'
tags:
  - cve.org
epss: 0.00129
epssPercentile: 0.02217
ingestedAt: '2026-10-16T17:24:46.727Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

iommu/amd: Fix clone_alias() to use the original device's devid

Currently clone_alias() assumes first argument (pdev) is always the
original device pointer. This function is called by
pci_for_each_dma_alias() which based on topology decides to send
original or alias device details in first argument.

This meant that the source devid used to look up and copy the DTE
may be incorrect, leading to wrong or stale DTE entries being
propagated to alias device.

Fix this by passing the original pdev as the opaque data argument to
both the direct clone_alias() call and pci_for_each_dma_alias(). Inside
clone_alias(), retrieve the original device from data and compute devid
from it.

## Affected

- `Linux >= 3332364e4ebc0581d133a334645a20fd13b580f1 < dbd76a537d8cb814e7f5b795ab21ecb7949c821d`
- `Linux >= 3332364e4ebc0581d133a334645a20fd13b580f1 < 20b3c566e2702e5d4d0545be8a97029a2eebcc0e`
- `Linux >= 3332364e4ebc0581d133a334645a20fd13b580f1 < dae251ff11d2d2208a029f98923756831cefec46`
- `Linux >= 3332364e4ebc0581d133a334645a20fd13b580f1 < faad224fe0f0857a04ff2eb3c90f0de57f47d0f3`
- `Linux 1f03a258f20f1699ede29bb40804074db9398a0d`
- `Linux >= 5.4.17 < 5.5`
- `Linux 5.5`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.