CVE-2026-43130

A flaw was found in the Linux kernel. When handling PCIe devices in scalable mode, the kernel may attempt to flush the device IOTLB (Input/Output Translation Lookaside Buffer) without verifying if the PCIe device is still accessible after a link-down fault. This improper handling during resource release, such as when a virtual machine is destroyed, can lead to a system hard-lock, resulting in a Denial of Service.

This vulnerability is rated as having a Low severity impact because exploitation is contingent upon an uncommon link-down hardware fault occurring on an assigned PCIe device during teardown operations, such as tearing down a virtual machine utilizing Intel VT-d scalable mode. Under standard operational conditions without disconnected or failing PCIe links, device translation table invalidations complete normally without causing a system lockup. Consequently, unprivileged users cannot reliably trigger this condition during normal workloads to cause a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.