CVE-2026-56930 · Infrastructure
NO FIX YET
In the kernel's SMMU (IOMMU) driver, stale translation lookaside buffer entries can be kept across stream identifiers because of a confused deputy flaw. A local user with no extra privileges can use this to escalate privileges to higher levels.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
The text describes a local privilege escalation in the arm SMMU driver (smmu.c) of the kernel, so machines running a kernel with that driver on ARM hardware are the ones to look at. The sources do not state which kernel versions or configurations are affected, and the description does not say whether a default configuration is involved.
Not affected if unknown
Who cares arm-smmu, linux, linux-kernel
Unknown from the sources.
No fix yet, per the sources.
In smmu_find_ste of smmu.c, there is a possible way to retain stale translation lookaside buffer entries across stream identifiers due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.