{"id":"CVE-2026-58811","kind":"vulnerability","aliases":["CVE-2026-58811"],"related":[],"title":"Linux SMMU driver: wrong memory attributes can leak local information","description":"In smmu_get_mair_idx of smmu.c, there is a possible way to apply incorrect memory attributes to direct memory access mappings due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"A logic error in the smmu.c driver function smmu_get_mair_idx applies incorrect memory attributes to direct memory access mappings. A local process could use this to read information it should not see, with no extra privileges and no user interaction.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["arm","infrastructure","kernel","linux","smmu"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T20:19:28+00:00","first_seen_at":"2026-11-10T20:46:12+00:00","triaged_at":"2026-11-10T20:50:10+00:00","updated_at":"2026-11-10T20:50:10+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T20:50:10Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Linux SMMU driver: wrong memory attributes can leak local information","impact":"low","summary":"A logic error in the smmu.c driver function smmu_get_mair_idx applies incorrect memory attributes to direct memory access mappings. A local process could use this to read information it should not see, with no extra privileges and no user interaction.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["linux","kernel","arm","smmu"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"local users read information from memory they should not access","analyst_note":"Confirm affected kernel versions and fixed commit from the kernel.org or vendor advisory; the NVD entry gives no product ranges.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"The flaw is in the kernel-level SMMU (IOMMU) driver code, so systems with ARM SMMU hardware and that driver loaded are the ones to look at. The sources do not name affected kernel versions or whether a default configuration is exposed. Systems without that hardware or driver are likely not affected, but the sources do not confirm this.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000698,"input_tokens":4542,"output_tokens":487,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-58811':13A,16A 'access':41B,84C 'addit':100C 'appli':34B,77C 'arm':17B 'attribut':6A,37B,80C 'could':46B,92C 'cve':11A,14A 'direct':39B,82C 'disclosur':97C 'driver':3A,28B 'due':86C 'error':24B,90C 'execut':101C 'exploit':110C 'extra':58B 'function':29B 'get':31B,66C 'idx':33B,68C 'incorrect':35B,78C 'inform':10A,51B,96C 'infrastructur':18B 'interact':63B,105C 'kernel':19B 'lead':93C 'leak':8A 'linux':1A,20B 'local':9A,44B,95C 'logic':23B,89C 'mair':32B,67C 'map':42B,85C 'memori':5A,36B,40B,79C,83C 'need':103C,108C 'possibl':74C 'privileg':59B,102C 'process':45B 'read':50B 'see':55B 'smmu':2A,21B,30B,65C 'smmu.c':27B,70C 'use':47B 'user':62B,104C 'way':75C 'wrong':4A","nicknames":[],"mitigations":[],"who_affected":"The flaw is in the kernel-level SMMU (IOMMU) driver code, so systems with ARM SMMU hardware and that driver loaded are the ones to look at. The sources do not name affected kernel versions or whether a default configuration is exposed. Systems without that hardware or driver are likely not affected, but the sources do not confirm this.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["arm","infrastructure","kernel","linux","smmu","unknown"],"campaign_type":null,"search_a":"'-2026':12A,15A '-58811':13A,16A 'attribut':6A 'cve':11A,14A 'driver':3A 'inform':10A 'leak':8A 'linux':1A 'local':9A 'memori':5A 'smmu':2A 'wrong':4A","search_b":"'access':41B 'appli':34B 'arm':17B 'attribut':37B 'could':46B 'direct':39B 'driver':28B 'error':24B 'extra':58B 'function':29B 'get':31B 'idx':33B 'incorrect':35B 'inform':51B 'infrastructur':18B 'interact':63B 'kernel':19B 'linux':20B 'local':44B 'logic':23B 'mair':32B 'map':42B 'memori':36B,40B 'privileg':59B 'process':45B 'read':50B 'see':55B 'smmu':21B,30B 'smmu.c':27B 'use':47B 'user':62B","search_c":"'access':84C 'addit':100C 'appli':77C 'attribut':80C 'could':92C 'direct':82C 'disclosur':97C 'due':86C 'error':90C 'execut':101C 'exploit':110C 'get':66C 'idx':68C 'incorrect':78C 'inform':96C 'interact':105C 'lead':93C 'local':95C 'logic':89C 'mair':67C 'map':85C 'memori':79C,83C 'need':103C,108C 'possibl':74C 'privileg':102C 'smmu':65C 'smmu.c':70C 'user':104C 'way':75C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:28+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-58811","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58811","severity":null,"published_at":"2026-11-10T20:19:28+00:00","modified_at":"2026-11-10T20:19:28+00:00","first_seen_at":"2026-11-10T20:46:12+00:00","fetched_at":"2026-11-10T20:46:12+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}