SEC.co
Emergency

By weakness (CWE)

CWE-826: related vulnerabilities

CVEs classified under CWE-826. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

Known exploited (KEV)CriticalHighMediumAll recent
  • CVE-2026-53322HIGH 8.8

    A timing vulnerability in the Linux kernel's VFIO (Virtual Function I/O) PCI driver creates a brief but exploitable window during device shutdown. When a PCIe function is disabled, the driver must revoke all direct memory access (DMABUF) mappings before clearing the Memory Space Enable (MSE) bit. If MSE is disabled first, a narrow race condition allows unprivileged local users to continue accessing device memory through existing DMABUF mappings even after the function should be inaccessible. This could lead to unauthorized data access, modification, or denial of service on systems where VFIO and DMABUFs are in active use.