Към съдържанието
Търсене

CVE-2026-43161: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode PCIe endpoints with ATS enabled and passed through to userspace (e.g., QEMU, DPDK) can hard-lock the host when their link drops, either by surprise removal or by a link fault. Commit 4fc82cd907ac ("iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected") adds pci_dev_is_disconnected() to devtlb_invalidation_with_pasid() so ATS invalidation is skipped only when the device is being safely removed, but it applies only when Intel IOMMU scalable mode is enabled. With scalable mode disabled or unsupported, a system hard-lock occurs when a PCIe endpoint's link drops because the Intel IOMMU waits indefinitely for an ATS invalidation that cannot complete. Call Trace: qi_submit_sync qi_flush_dev_iotlb __context_flush_dev_iotlb.part.0 domain_context_clear_one_cb pci_for_each_dma_alias device_block_translation blocking_domain_attach_dev iommu_deinit_device __iommu_group_remove_device iommu_release_device iommu_bus_notifier blocking_notifier_call_chain bus_notify device_del pci_remove_bus_device pci_stop_and_remove_bus_device pciehp_unconfigure_device pciehp_disable_slot pciehp_handle_presence_or_link_change pciehp_ist Commit 81e921fd3216 ("iommu/vt-d: Fix NULL domain on device release") adds intel_pasid_teardown_sm_context() to intel_iommu_release_device(), which calls qi_flush_dev_iotlb() and can also hard-lock the system when a PCIe endpoint's link drops. Call Trace: qi_submit_sync qi_flush_dev_iotlb __context_flush_dev_iotlb.part.0 intel_context_flush_no_pasid device_pasid_table_teardown pci_pasid_table_teardown pci_for_each_dma_alias intel_pasid_teardown_sm_context intel_iommu_release_device iommu_deinit_device __iommu_group_remove_device iommu_release_device iommu_bus_notifier blocking_notifier_call_chain bus_notify device_del pci_remove_bus_device pci_stop_

    Засегнати продукти

    • Linux Linux: 37764b952e1b39053defc7ebe5dcd8c4e3e78de9 преди 48b3f08e68b29a79527869cdde7298ca2a9b9646; 37764b952e1b39053defc7ebe5dcd8c4e3e78de9 преди e70d5feb10c5ba2bbf7ca400b8f39a2f82d653e8; 37764b952e1b39053defc7ebe5dcd8c4e3e78de9 преди bc0490ad9edf5c6f98e39fbbee2877b85261a5ae; 37764b952e1b39053defc7ebe5dcd8c4e3e78de9 преди 42662d19839f34735b718129ea200e3734b07e50; 99301a53a1378f8863ac7850b9589f997bb0e125; 948ec6d003280d49aca49b366aa5cb140f87434d; 5.12.19 преди 5.13; 5.13.4 преди 5.14
    • Linux Linux: 5.14; преди 5.14; 6.12.77 до 6.12.*; 6.18.17 до 6.18.*; 6.19.6 до 6.19.*; от 7.0 нататък

    История

    • 6 май 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-43161: Linux | freedomonline.bg