{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "71db84a092c399f434976d0522e848e9803cd51a"
            },
            {
              "fixed": "0507fcedbdcc87281ef8639c045fc9980363bbb6"
            },
            {
              "fixed": "f2d70dbd3dcefa8e3c380beff9c31f5f033a4221"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.19.0"
            },
            {
              "fixed": "7.1.5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74328.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\niommufd: Destroy the pages content after detaching from dmabuf\n\nSashiko points out this has gotten out of order, the mutex could still be\nin use through the dmabuf invalidation callbacks. Don't destroy any of the\npages content until the dmabuf is fully detached.",
  "id": "CVE-2026-74328",
  "modified": "2026-08-18T03:31:19.199577200Z",
  "published": "2026-08-15T05:58:22.371Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/0507fcedbdcc87281ef8639c045fc9980363bbb6"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/f2d70dbd3dcefa8e3c380beff9c31f5f033a4221"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74328.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74328"
    },
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    }
  ],
  "schema_version": "1.9.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "iommufd: Destroy the pages content after detaching from dmabuf"
}