In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Fix RB-tree corruption in probe error path
The info->node RB-tree member is zero-initialized via kzalloc. If a device does not support ATS, the device_rbtree_insert() call is skipped. If a subsequent probe step fails, the error path jumps to device_rbtree_remove(), which misinterprets the zeroed node as a tree root and corrupts the device RB-tree.
Fix this by explicitly initializing the RB-node as empty using RB_CLEAR_NODE() during initialization and guarding the removal with RB_EMPTY_NODE().
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Aug 21, 2026 | Aug 15, 2026 |
| Ubuntu | — | Upgrade linux-image-azure-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-gke-64kUpgrade linux-image-oem-7.0Upgrade linux-image-ibmUpgrade linux-image-7.0.0-1008-gke-64kUpgrade linux-image-genericUpgrade linux-image-7.0.0-1014-gcpUpgrade linux-image-7.0.0-38-generic-64kUpgrade linux-image-7.0.0-1017-azureUpgrade linux-image-7.0.0-38-genericUpgrade linux-image-7.0.0-38-realtime-64kUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-7.0.0-1014-awsUpgrade linux-image-aws-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-7.0.0-1008-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-7.0.0-1015-oemUpgrade linux-image-azureUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-64k-7.0Upgrade linux-image-oracle-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-oem-26.04Upgrade linux-image-gke-64k-7.0Upgrade linux-image-gke-7.0Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-7.0.0-1014-gcp-64kUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-ibm-7.0Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-7.0Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-realtime-64kUpgrade linux-image-azure-fde-7.0Upgrade linux-image-azure-fde-lts-26.04Upgrade linux-image-gcpUpgrade linux-image-azure-lts-26.04Upgrade linux-image-7.0.0-1013-oracle-64kUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-7.0.0-38-realtimeUpgrade linux-image-7.0.0-1016-azure-fdeUpgrade linux-image-7.0.0-1015-ibmUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-7.0.0-1013-oracleUpgrade linux-image-oracleUpgrade linux-image-aws-64kUpgrade linux-image-7.0.0-1014-aws-64kUpgrade linux-image-virtual-7.0Upgrade linux-image-realtimeUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-gkeUpgrade linux-image-generic-7.0 | Oct 7, 2026 | Oct 6, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub