Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U N N H 5.5 .0015 5.2 —
AFFECTED Product Versions Fixed Linux 07838f7fd529c8a6de44b601d4b7057e6c8d36ed – — Linux 6.11 – 6.12.101
TIMELINE Jul 19 Reserved by Linux Jul 25 Published (CNA: Linux) Aug 17 ENRICHED — CVE-2026-64290 (Linux). Received CVSS 5.5 and CPE data from NVD.
In the Linux kernel, the following vulnerability has been resolved: iommufd: Break the loop on failure in iommufd_fault_fops_read() On a copy_to_user() failure inside the inner list_for_each_entry, only the inner loop breaks; the outer while re-fetches the just-restored fault group and retries the failing copy_to_user() forever, spinning the reader at 100% CPU with fault->mutex held. Check rc after the inner loop and break the outer while as well.
| Date | Event | Detail |
|---|---|---|
| July 19, 2026 | Reserved | Reserved by Linux |
| July 25, 2026 | Published | Published (CNA: Linux) |
| August 17, 2026 | ENRICHED | ENRICHED — CVE-2026-64290 (Linux). Received CVSS 5.5 and CPE data from NVD. |
Authoritative record: CVE-2026-64290 at cve.org
Vendors: linux
Weaknesses: CWE-835
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-64290 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.