In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Disallow dirty tracking if incoherent page walk
Dirty page tracking relies on the IOMMU atomically updating the dirty bit in the paging-structure entry. For this operation to succeed, the paging- structure memory must be coherent between the IOMMU and the CPU. In another word, if the iommu page walk is incoherent, dirty page tracking doesn't work.
The Intel VT-d specification, Section 3.10 "Snoop Behavior" states:
"Remapping hardware encountering the need to atomically update A/EA/D bits in a paging-structure entry that is not snooped will result in a non- recoverable fault."
To prevent an IOMMU from being incorrectly configured for dirty page tracking when it is operating in an incoherent mode, mark SSADS as supported only when both ecap_slads and ecap_smpwc are supported.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-debug-develUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-devel-matchedUpgrade rvUpgrade kernel-rt-64k-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-develUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade libperfUpgrade kernel-64k-debug-coreUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernelUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade python3-perfUpgrade kernel-64k-modulesUpgrade kernel-64kUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64kUpgrade kernel-rt-64k-debugUpgrade kernel-zfcpdumpUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-headersUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-modules-coreUpgrade kernel-uki-virtUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rtUpgrade kernel-docUpgrade kernel-64k-modules-coreUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-modulesUpgrade kernel-64k-coreUpgrade kernel-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64k-devel | Dec 10, 2025 | Dec 1, 2025 |
| Amazon_linux_2023 | — | Upgrade bpftool6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade bpftool6.12Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-modules-extraUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.12-libbpf-develUpgrade kernel-livepatch-6.12.53-69.119Upgrade kernel6.12-headersUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade python3-perf6.12Upgrade kernel6.12-tools-develUpgrade kernel6.12-develUpgrade perf6.12Upgrade kernel6.12-libbpfUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12-debuginfo | Dec 9, 2025 | Oct 28, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 3, 2025 | Oct 28, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Dec 2, 2025 | Oct 28, 2025 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-coreUpgrade kernel-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade rvUpgrade perf-debuginfoUpgrade kernel-debugUpgrade libperfUpgrade kernel-rtUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade rtlaUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debug-develUpgrade libperf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-uki-virt-addonsUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-coreUpgrade kernelUpgrade kernel-debug-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extra-matched | Feb 5, 2026 | Dec 14, 2025 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade kernel-default-baseUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default | Dec 5, 2025 | Nov 11, 2025 |
| Ubuntu | — | Upgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-6.17Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-6.17Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-oracleUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-6.17Upgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-fipsUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-genericUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-ibm-6.8Upgrade linux-image-aws-64kUpgrade linux-image-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-aws-6.17Upgrade linux-image-6.17.0-1008-azureUpgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-6.17.0-1011-oemUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-6.17Upgrade linux-image-6.17.0-1007-awsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-gke-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.17.0-14-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-64kUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-6.17Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspiUpgrade linux-image-xilinxUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-azureUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-virtual-6.17Upgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-realtime-6.17Upgrade linux-image-oem-6.17Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-6.17Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-6.17Upgrade linux-image-intel-iot-realtime | Feb 13, 2026 | Feb 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub