CVE-2026-23361

A flaw was found in the Linux kernel. A race condition exists in the handling of Message Signaled Interrupts eXtended (MSI-X) within the PCI subsystem. When an MSI-X interrupt is raised, a PCI posted write transaction may not complete before its associated Address Translation Unit (ATU) entry is unmapped. This timing issue can lead to memory corruption or Input/Output Memory Management Unit (IOMMU) errors on the host system.

This flaw affects systems using DesignWare PCI endpoint controllers (dwc) with MSI-X. The race between the posted write and ATU unmap can cause the write to go to unmapped address space, corrupting host memory or triggering IOMMU faults. Primarily affects embedded systems using PCI endpoint functionality with NVMe target emulation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.