CVE-2026-45945
kernel: iommu/vt-d: Fix race condition during PASID entry replacement
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 27, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's Intel VT-d (Virtualization Technology for Directed I/O) implementation. A race condition occurs during the replacement of an active PASID (Process Address Space ID) entry. This can lead to the IOMMU (Input/Output Memory Management Unit) hardware reading an inconsistent state, resulting in unpredictable system behavior or spurious faults, effectively causing a Denial of Service.
Statement
This vulnerability is rated as Moderate impact because triggering it requires local access on systems operating with Intel VT-d virtualization features and Process Address Space ID (PASID) support. When dynamic domain remapping occurs under concurrent workloads, incomplete hardware reads can trigger kernel instability or unhandled translation faults. The impact is confined to a local denial of service, with no compromise to system data confidentiality or integrity.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-366 · Race Condition within a Thread