CVE Database›Document archive›CVE-2026-45944

CVE-2026-45944

kernel: iommu/vt-d: Clear Present bit before tearing down context entry

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · May 27, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's IOMMU (Input/Output Memory Management Unit) VT-d (Virtualization Technology for Directed I/O) component. When a context entry is being torn down, the 'Present' bit might not be cleared before other parts of the entry are zeroed. This can lead to the hardware reading an inconsistent state, resulting in unpredictable system behavior or spurious faults.

Statement

This vulnerability is rated as a Moderate impact because triggering the condition requires local privileges and specific timing during device detachment or reconfiguration, primarily resulting in a denial of service. The flaw specifically affects systems utilizing Intel VT-d hardware when device context tables undergo teardown operations, such as dynamic PCI passthrough release on virtualization hosts. Because hardware can fetch transiently inconsistent entries during the deallocation process, the system may encounter spurious faults or unexpected instability.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition