CVE-2025-40058

A flaw was found in the Intel VT-d IOMMU support in the Linux kernel. When an IOMMU is configured to perform dirty-page tracking, but the page-walk memory region is incoherent between the IOMMU and CPU, the hardware may attempt to atomically update the bits in a paging-structure entry that is not properly snooped. The resulting fault could lead to a system hang and a non-recoverable state.

This vulnerability is rated as Moderate severity because triggering the condition requires specific hardware configurations exhibiting incoherent memory snooping alongside Intel VT-d dirty-page tracking, restricting the primary impact to a local denial of service. The issue typically surfaces in virtualized deployments that utilize VFIO direct device assignment during live guest migration. Because initiating dirty tracking on assigned devices demands elevated privileges or specialized virtualization management workflows, standard Linux deployments are not exposed under default operation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria, comprising ease of use and deployment, applicability to widespread installation base or stability.