Linux kernel arm-smmu-v3: device teardown frees the IOPF queue before the IRQ handler that uses it

Impact

arm_smmu_device_remove() freed the IOPF queue, destroyed the vmid_map and disabled the device by hand, while the IRQs and queues were devm managed. devm unwinds only after remove() returns, so the cleanup ran in the wrong order and the IOPF queue was freed while the event-queue IRQ whose handler uses it was still registered - a use-after-free window during SMMU teardown. The fix moves all of it under devm so the unwind order is correct, and is a stated prerequisite for fixing a Tegra241 CMDQV CMD_SYNC use-after-free, which is why this touches Arm-based GPU nodes (Grace-class platforms) specifically. Exposure is narrow: the path runs on SMMU driver unbind or module removal, which is a root action on a running node, not something a tenant can trigger.

Who can reach it

Local, root-equivalent: a process able to unbind the arm-smmu-v3 driver or remove the module. Not reachable by a tenant with a GPU pod, and not reachable over the network. Only Arm platforms with an SMMUv3 are affected; x86 hosts do not run this driver.

What to do

Take the fix from your distribution's stable kernel (commits linked). Deploying it requires a reboot, so drain and reboot each affected Arm node. Until then the practical mitigation is operational: do not unbind or unload the arm-smmu-v3 driver on a live node.

References

Related entries

• Linux kernel PCI/proc: config space read checked against the reader's credentials, not the opener'sCVE-2026-93206 · Linux kernel PCI procfs interface (proc_bus_pci_read CAP_SYS_ADMIN check)Unscored
• Linux kernel SCSI core: blocking tag allocation during error recovery can deadlock the EH threadCVE-2026-93781 · Linux kernel SCSI core (scsi_eh_lock_door tag allocation)Unscored
• Linux kernel BPF: sysctl value replaced by a BPF program is not NUL-terminated, giving out-of-bounds readsCVE-2026-97420 · Linux kernel BPF (bpf_sysctl_set_new_value replacement buffer)Unscored
• Linux kernel net/rds: unprivileged container reads every RDS socket and connection on the hostCVE-2026-97476 · Linux kernel net/rds RDS_INFO_* getsockopt (missing netns filtering)Unscored
• Linux kernel net/rds: RDS-over-IB shutdown sleeps in a shared worker and hangs fabric teardownCVE-2026-97491 · Linux kernel net/rds over InfiniBand (rds_ib_conn_path_shutdown sleeping in the shutdown worker)Unscored
• Linux PCI sysfs: BAR resize via resourceN_resize had no CAP_SYS_ADMIN checkCVE-2026-97505 · Linux kernel PCI sysfs (resourceN_resize, __resource_resize_store)Unscored