# CVE-2026-97525

Linux kernel split page tables can leave stale IOTLB entries enabling DMA access to kernel memory.

- Page: https://www.vulneraibility.com/cve/CVE-2026-97525
- CVSS: 8.2
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.17% (percentile 6.2)
- Published: 2026-09-25

## Affected versions

- Linux: affected >= b3039c526f3e1744db0cbb7ae1f0213f5e27d3f4 and < 84e0cd79d57f06b872154eb5d8f610584133f260; >= 5ba2f0a1556479638ac11a3c201421f5515e89f5 and < 922873cf4fc34124215070a8ad391bf831538bb9; >= 5ba2f0a1556479638ac11a3c201421f5515e89f5 and < 9e4a3ec3411bb6bb59e3c1f29b75609f1e87aac4; >= 6.18.7 and < 6.18.53; 6.19; fixed in < 6.19, >= 6.18.53 and <= 6.18.*, >= 7.2.7 and <= 7.2.*, >= 7.3-rc4 and <= *

A version outside these ranges is not a statement that it is unaffected.

## Impact

Stale IOTLB entries may allow DMA-capable devices or malicious guests to read/modify kernel memory, causing data disclosure or privilege escalation.

## Action

Patch when possible

## Recommendation

Apply upstream kernel fixes or vendor-updates immediately; reboot if required.

## References

- [other] https://git.kernel.org/stable/c/84e0cd79d57f06b872154eb5d8f610584133f260
- [other] https://git.kernel.org/stable/c/922873cf4fc34124215070a8ad391bf831538bb9
- [other] https://git.kernel.org/stable/c/9e4a3ec3411bb6bb59e3c1f29b75609f1e87aac4

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.