In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Disallow dirty tracking if incoherent page walk
Dirty page tracking relies on the IOMMU atomically updating the dirty bit in the paging-structure entry. For this operation to succeed, the paging- structure memory must be coherent between the IOMMU and the CPU. In another word, if the iommu page walk is incoherent, dirty page tracking doesn't work.
The Intel VT-d specification, Section 3.10 "Snoop Behavior" states:
"Remapping hardware encountering the need to atomically update A/EA/D bits in a paging-structure entry that is not snooped will result in a non- recoverable fault."
To prevent an IOMMU from being incorrectly configured for dirty page tracking when it is operating in an incoherent mode, mark SSADS as supported only when both ecap_slads and ecap_smpwc are supported.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-modulesUpgrade python3-perfUpgrade kernel-rt-64k-debug-develUpgrade kernelUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-debug-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-abi-stablelistsUpgrade perfUpgrade kernel-rt-64k-modulesUpgrade rvUpgrade libperfUpgrade kernel-rt-64k-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-64kUpgrade kernel-zfcpdump-coreUpgrade kernel-64kUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-headersUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-develUpgrade kernel-rt-64k-modules-coreUpgrade kernel-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-rt-64k-coreUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-64k-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade rtlaUpgrade kernel-debug-uki-virtUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-64k-develUpgrade kernel-64k-modules-coreUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-rt-64k-develUpgrade kernel-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-devel | Dec 10, 2025 | Dec 1, 2025 |
| Amazon_linux_2023 | — | Upgrade python3-perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-tools-develUpgrade kernel6.12-libbpfUpgrade perf6.12Upgrade kernel6.12-headersUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-toolsUpgrade kernel-livepatch-6.12.53-69.119Upgrade kernel6.12-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade bpftool6.12Upgrade perf6.12-debuginfo | Dec 9, 2025 | Oct 28, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Dec 3, 2025 | Oct 28, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Dec 2, 2025 | Oct 28, 2025 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-uki-virtUpgrade libperfUpgrade kernel-rt-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-debug-uki-virtUpgrade kernel-toolsUpgrade rvUpgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade kernel-rtUpgrade python3-perfUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade libperf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libsUpgrade kernel-modules-extra-matchedUpgrade kernel-debuginfo-common-s390xUpgrade rtla | Feb 5, 2026 | Dec 14, 2025 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-default | Dec 5, 2025 | Nov 11, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-lowlatency-6.8Upgrade linux-image-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracleUpgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-generic-6.8Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-6.17.0-1011-oemUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-aws-6.17Upgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-oracle-6.17Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.17.0-1008-azureUpgrade linux-image-generic-6.17Upgrade linux-image-genericUpgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-azure-6.17Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-lts-24.04Upgrade linux-image-xilinxUpgrade linux-image-raspi-realtimeUpgrade linux-image-xilinx-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-virtual-6.17Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-gke-6.8Upgrade linux-image-gkeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-6.17.0-1007-awsUpgrade linux-image-gcp-6.17Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-azure-fipsUpgrade linux-image-realtime-6.17Upgrade linux-image-oem-6.17Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-6.17Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-raspi-6.17Upgrade linux-image-oem-22.04dUpgrade linux-image-gke-64kUpgrade linux-image-gcp-64kUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.17.0-14-genericUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-aws-64k-6.17Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-gcp-fips | Feb 13, 2026 | Feb 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub