---
id: CVE-2026-64290
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  iommufd: Break the loop on failure in iommufd_fault_fops_read()

  On a copy_to_user() failure inside the inner list_for_each_entry, only the
  inner loop breaks; the outer…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  iommufd: Break the loop on failure in iommufd_fault_fops_read()

  On a copy_to_user() failure inside the inner list_for_each_entry, only the
  inner loop breaks; the outer…
severity: none
published: '2026-07-25'
updated: '2026-08-03'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-64290'
references:
  - url: 'https://git.kernel.org/stable/c/172fc8b19825a0f5884c38f2289188284e2d45ee'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/5539da127d03c1f6c2e2a49fdfbe331a0ccbdea8'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/a38e0714affc5c0bbb40cba5a65d6d32a5e72a71'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/f66c16b175509642ee7082df57c9bf3deaebae1a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
epss: 0.00159
epssPercentile: 0.05497
ingestedAt: '2026-08-03T10:24:20.705Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

iommufd: Break the loop on failure in iommufd_fault_fops_read()

On a copy_to_user() failure inside the inner list_for_each_entry, only the
inner loop breaks; the outer while re-fetches the just-restored fault group
and retries the failing copy_to_user() forever, spinning the reader at 100%
CPU with fault->mutex held.

Check rc after the inner loop and break the outer while as well.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.