PT-2025-44126 · Intel +1 · Intel Vt-D +1

Published 2025-10-28 · Updated 2025-10-28 · CVE-2025-40058

Positive Technologies · (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the IOMMU/VT-d component related to dirty page tracking. Dirty page tracking depends on the IOMMU atomically updating the dirty bit in the paging-structure entry, which requires coherent paging-structure memory between the IOMMU and the CPU. The Intel VT-d specification indicates that attempting to atomically update bits in a non-snooped paging-structure entry will result in a non-recoverable fault. The issue arises when an IOMMU is incorrectly configured for dirty page tracking while operating in an incoherent mode. This can occur if SSADS is supported without both ecap slads and ecap smpwc being supported.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2025-40058

Affected Products

Intel Vt-D

Linux Kernel

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-40058 · Security Note
• https://git.kernel.org/stable/c/57f55048e564dedd8a4546d018e29d6bbfff0a7e · Note
• https://git.kernel.org/stable/c/ebe16d245a00626bb87163862a1b07daf5475a3e · Note
• https://git.kernel.org/stable/c/8d096ce0e87bdc361f0b25d7943543bc53aa0b9e · Note
• https://twitter.com/CVEnew/status/1983149461095551261 · Twitter Post