PT-2025-44126 · Intel+7 · Intel Vt-D+7
CVE-2025-40058
·
Publicado
2025-09-26
·
Atualizado
2026-05-07
CVSS v3.1
8.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw in the IOMMU/VT-d component related to dirty page tracking. Dirty page tracking depends on the IOMMU atomically updating the dirty bit in the paging-structure entry, which requires coherent paging-structure memory between the IOMMU and the CPU. The Intel VT-d specification indicates that attempting to atomically update bits in a non-snooped paging-structure entry will result in a non-recoverable fault. The issue arises when an IOMMU is incorrectly configured for dirty page tracking while operating in an incoherent mode. This can occur if SSADS is supported without both ecap slads and ecap smpwc being supported.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Almalinux
Intel Vt-D
Linuxmint
Linux Kernel
Red Hat
Rocky Linux
Suse
Ubuntu