CVE-2026-43130

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-43130", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-01T14:12:55.988Z", "datePublished": "2026-05-06T11:27:18.825Z", "dateUpdated": "2026-11-06T15:32:32.416Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-23T16:06:22.409Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode\n\nCommit 4fc82cd907ac (\"iommu/vt-d: Don't issue ATS Invalidation\nrequest when device is disconnected\") relies on\npci_dev_is_disconnected() to skip ATS invalidation for\nsafely-removed devices, but it does not cover link-down caused\nby faults, which can still hard-lock the system.\n\nFor example, if a VM fails to connect to the PCIe device,\n\"virsh destroy\" is executed to release resources and isolate\nthe fault, but a hard-lockup occurs while releasing the group fd.\n\nCall Trace:\n qi_submit_sync\n qi_flush_dev_iotlb\n intel_pasid_tear_down_entry\n device_block_translation\n blocking_domain_attach_dev\n __iommu_attach_device\n __iommu_device_set_domain\n __iommu_group_set_domain_internal\n iommu_detach_group\n vfio_iommu_type1_detach_group\n vfio_group_detach_container\n vfio_group_fops_release\n __fput\n\nAlthough pci_device_is_present() is slower than\npci_dev_is_disconnected(), it still takes only ~70 \u00b5s on a\nConnectX-5 (8 GT/s, x2) and becomes even faster as PCIe speed\nand width increase.\n\nBesides, devtlb_invalidation_with_pasid() is called only in the\npaths below, which are far less frequent than memory map/unmap.\n\n1. mm-struct release\n2. {attach,release}_dev\n3. set/remove PASID\n4. dirty-tracking setup\n\nThe gain in system stability far outweighs the negligible cost\nof using pci_device_is_present() instead of pci_dev_is_disconnected()\nto decide when to skip ATS invalidation, especially under GDR\nhigh-load conditions."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iommu/intel/pasid.c"], "versions": [{"version": "f873b85ec762c5a6abe94a7ddb31df5d3ba07d85", "lessThan": "581ce094d9eafb78ec4f9de77bd24b780c151236", "status": "affected", "versionType": "git"}, {"version": "d70f1c85113cd8c2aa8373f491ca5d1b22ec0554", "lessThan": "e2c78c69f8faf2885ea4ceee08c71ac738f401a0", "status": "affected", "versionType": "git"}, {"version": "34a7b30f56d30114bf4d436e4dc793afe326fbcf", "lessThan": "ead67d0378e90f419e385a43af29435242d80c12", "status": "affected", "versionType": "git"}, {"version": "2b74b2a92e524d7c8dec8e02e95ecf18b667c062", "lessThan": "01aed2f1d7cb8fdf4c60c5bb4727608cb82b401d", "status": "affected", "versionType": "git"}, {"version": "4fc82cd907ac075648789cc3a00877778aa1838b", "lessThan": "9813306610d0d718c863aaa70928bf57d7570ec0", "status": "affected", "versionType": "git"}, {"version": "4fc82cd907ac075648789cc3a00877778aa1838b", "lessThan": "9deaacc8dcaddb6ddc5b52e1e63b457450ec0f94", "status": "affected", "versionType": "git"}, {"version": "4fc82cd907ac075648789cc3a00877778aa1838b", "lessThan": "0da6697e577023d8867c7beb2d16a22510e4eea9", "status": "affected", "versionType": "git"}, {"version": "4fc82cd907ac075648789cc3a00877778aa1838b", "lessThan": "10e60d87813989e20eac1f3eda30b3bae461e7f9", "status": "affected", "versionType": "git"}, {"version": "c04f2780919f20e2cc4846764221f5e802555868", "status": "affected", "versionType": "git"}, {"version": "025bc6b41e020aeb1e71f84ae3ffce945026de05", "status": "affected", "versionType": "git"}, {"version": "5.10.214", "lessThan": "5.10.252", "status": "affected", "versionType": "semver"}, {"version": "5.15.153", "lessThan": "5.15.202", "status": "affected", "versionType": "semver"}, {"version": "6.1.83", "lessThan": "6.1.165", "status": "affected", "versionType": "semver"}, {"version": "6.6.23", "lessThan": "6.6.128", "status": "affected", "versionType": "semver"}, {"version": "6.7.11", "lessThan": "6.8", "status": "affected", "versionType": "semver"}, {"version": "6.8.2", "lessThan": "6.9", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iommu/intel/pasid.c"], "versions": [{"version": "6.9", "status": "affected"}, {"version": "0", "lessThan": "6.9", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.252", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.202", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.165", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.128", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.75", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.16", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.6", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10.214", "versionEndExcluding": "5.10.252"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15.153", "versionEndExcluding": "5.15.202"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.1.83", "versionEndExcluding": "6.1.165"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.23", "versionEndExcluding": "6.6.128"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "6.12.75"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "6.18.16"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "6.19.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "7.0"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7.11"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/581ce094d9eafb78ec4f9de77bd24b780c151236"}, {"url": "https://git.kernel.org/stable/c/e2c78c69f8faf2885ea4ceee08c71ac738f401a0"}, {"url": "https://git.kernel.org/stable/c/ead67d0378e90f419e385a43af29435242d80c12"}, {"url": "https://git.kernel.org/stable/c/01aed2f1d7cb8fdf4c60c5bb4727608cb82b401d"}, {"url": "https://git.kernel.org/stable/c/9813306610d0d718c863aaa70928bf57d7570ec0"}, {"url": "https://git.kernel.org/stable/c/9deaacc8dcaddb6ddc5b52e1e63b457450ec0f94"}, {"url": "https://git.kernel.org/stable/c/0da6697e577023d8867c7beb2d16a22510e4eea9"}, {"url": "https://git.kernel.org/stable/c/10e60d87813989e20eac1f3eda30b3bae461e7f9"}], "title": "iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-43130", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T15:29:00.364045Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T15:32:32.416Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-43130", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T15:29:00.364045Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T15:29:02.012Z"}}], "cna": {"title": "iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "f873b85ec762c5a6abe94a7ddb31df5d3ba07d85", "lessThan": "581ce094d9eafb78ec4f9de77bd24b780c151236", "versionType": "git"}, {"status": "affected", "version": "d70f1c85113cd8c2aa8373f491ca5d1b22ec0554", "lessThan": "e2c78c69f8faf2885ea4ceee08c71ac738f401a0", "versionType": "git"}, {"status": "affected", "version": "34a7b30f56d30114bf4d436e4dc793afe326fbcf", "lessThan": "ead67d0378e90f419e385a43af29435242d80c12", "versionType": "git"}, {"status": "affected", "version": "2b74b2a92e524d7c8dec8e02e95ecf18b667c062", "lessThan": "01aed2f1d7cb8fdf4c60c5bb4727608cb82b401d", "versionType": "git"}, {"status": "affected", "version": "4fc82cd907ac075648789cc3a00877778aa1838b", "lessThan": "9813306610d0d718c863aaa70928bf57d7570ec0", "versionType": "git"}, {"status": "affected", "version": "4fc82cd907ac075648789cc3a00877778aa1838b", "lessThan": "9deaacc8dcaddb6ddc5b52e1e63b457450ec0f94", "versionType": "git"}, {"status": "affected", "version": "4fc82cd907ac075648789cc3a00877778aa1838b", "lessThan": "0da6697e577023d8867c7beb2d16a22510e4eea9", "versionType": "git"}, {"status": "affected", "version": "4fc82cd907ac075648789cc3a00877778aa1838b", "lessThan": "10e60d87813989e20eac1f3eda30b3bae461e7f9", "versionType": "git"}, {"status": "affected", "version": "c04f2780919f20e2cc4846764221f5e802555868", "versionType": "git"}, {"status": "affected", "version": "025bc6b41e020aeb1e71f84ae3ffce945026de05", "versionType": "git"}, {"status": "affected", "version": "5.10.214", "lessThan": "5.10.252", "versionType": "semver"}, {"status": "affected", "version": "5.15.153", "lessThan": "5.15.202", "versionType": "semver"}, {"status": "affected", "version": "6.1.83", "lessThan": "6.1.165", "versionType": "semver"}, {"status": "affected", "version": "6.6.23", "lessThan": "6.6.128", "versionType": "semver"}, {"status": "affected", "version": "6.7.11", "lessThan": "6.8", "versionType": "semver"}, {"status": "affected", "version": "6.8.2", "lessThan": "6.9", "versionType": "semver"}], "programFiles": ["drivers/iommu/intel/pasid.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.9"}, {"status": "unaffected", "version": "0", "lessThan": "6.9", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.252", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.202", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.165", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.128", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.75", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.16", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19.6", "versionType": "semver", "lessThanOrEqual": "6.19.*"}, {"status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/iommu/intel/pasid.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/581ce094d9eafb78ec4f9de77bd24b780c151236"}, {"url": "https://git.kernel.org/stable/c/e2c78c69f8faf2885ea4ceee08c71ac738f401a0"}, {"url": "https://git.kernel.org/stable/c/ead67d0378e90f419e385a43af29435242d80c12"}, {"url": "https://git.kernel.org/stable/c/01aed2f1d7cb8fdf4c60c5bb4727608cb82b401d"}, {"url": "https://git.kernel.org/stable/c/9813306610d0d718c863aaa70928bf57d7570ec0"}, {"url": "https://git.kernel.org/stable/c/9deaacc8dcaddb6ddc5b52e1e63b457450ec0f94"}, {"url": "https://git.kernel.org/stable/c/0da6697e577023d8867c7beb2d16a22510e4eea9"}, {"url": "https://git.kernel.org/stable/c/10e60d87813989e20eac1f3eda30b3bae461e7f9"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode\n\nCommit 4fc82cd907ac (\"iommu/vt-d: Don't issue ATS Invalidation\nrequest when device is disconnected\") relies on\npci_dev_is_disconnected() to skip ATS invalidation for\nsafely-removed devices, but it does not cover link-down caused\nby faults, which can still hard-lock the system.\n\nFor example, if a VM fails to connect to the PCIe device,\n\"virsh destroy\" is executed to release resources and isolate\nthe fault, but a hard-lockup occurs while releasing the group fd.\n\nCall Trace:\n qi_submit_sync\n qi_flush_dev_iotlb\n intel_pasid_tear_down_entry\n device_block_translation\n blocking_domain_attach_dev\n __iommu_attach_device\n __iommu_device_set_domain\n __iommu_group_set_domain_internal\n iommu_detach_group\n vfio_iommu_type1_detach_group\n vfio_group_detach_container\n vfio_group_fops_release\n __fput\n\nAlthough pci_device_is_present() is slower than\npci_dev_is_disconnected(), it still takes only ~70 \u00b5s on a\nConnectX-5 (8 GT/s, x2) and becomes even faster as PCIe speed\nand width increase.\n\nBesides, devtlb_invalidation_with_pasid() is called only in the\npaths below, which are far less frequent than memory map/unmap.\n\n1. mm-struct release\n2. {attach,release}_dev\n3. set/remove PASID\n4. dirty-tracking setup\n\nThe gain in system stability far outweighs the negligible cost\nof using pci_device_is_present() instead of pci_dev_is_disconnected()\nto decide when to skip ATS invalidation, especially under GDR\nhigh-load conditions."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.10.252", "versionStartIncluding": "5.10.214"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.202", "versionStartIncluding": "5.15.153"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.165", "versionStartIncluding": "6.1.83"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.128", "versionStartIncluding": "6.6.23"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.12.75", "versionStartIncluding": "6.9"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.18.16", "versionStartIncluding": "6.9"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.19.6", "versionStartIncluding": "6.9"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.0", "versionStartIncluding": "6.9"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "6.7.11"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "6.8.2"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-23T16:06:22.409Z"}}}, "cveMetadata": {"cveId": "CVE-2026-43130", "state": "PUBLISHED", "dateUpdated": "2026-11-06T15:32:32.416Z", "dateReserved": "2026-05-01T14:12:55.988Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2026-05-06T11:27:18.825Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/iommu/intel/pasid.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "581ce094d9eafb78ec4f9de77bd24b780c151236", "status": "affected", "version": "f873b85ec762c5a6abe94a7ddb31df5d3ba07d85", "versionType": "git"}, {"lessThan": "e2c78c69f8faf2885ea4ceee08c71ac738f401a0", "status": "affected", "version": "d70f1c85113cd8c2aa8373f491ca5d1b22ec0554", "versionType": "git"}, {"lessThan": "ead67d0378e90f419e385a43af29435242d80c12", "status": "affected", "version": "34a7b30f56d30114bf4d436e4dc793afe326fbcf", "versionType": "git"}, {"lessThan": "01aed2f1d7cb8fdf4c60c5bb4727608cb82b401d", "status": "affected", "version": "2b74b2a92e524d7c8dec8e02e95ecf18b667c062", "versionType": "git"}, {"lessThan": "9813306610d0d718c863aaa70928bf57d7570ec0", "status": "affected", "version": "4fc82cd907ac075648789cc3a00877778aa1838b", "versionType": "git"}, {"lessThan": "9deaacc8dcaddb6ddc5b52e1e63b457450ec0f94", "status": "affected", "version": "4fc82cd907ac075648789cc3a00877778aa1838b", "versionType": "git"}, {"lessThan": "0da6697e577023d8867c7beb2d16a22510e4eea9", "status": "affected", "version": "4fc82cd907ac075648789cc3a00877778aa1838b", "versionType": "git"}, {"lessThan": "10e60d87813989e20eac1f3eda30b3bae461e7f9", "status": "affected", "version": "4fc82cd907ac075648789cc3a00877778aa1838b", "versionType": "git"}, {"status": "affected", "version": "c04f2780919f20e2cc4846764221f5e802555868", "versionType": "git"}, {"status": "affected", "version": "025bc6b41e020aeb1e71f84ae3ffce945026de05", "versionType": "git"}, {"lessThan": "5.10.252", "status": "affected", "version": "5.10.214", "versionType": "semver"}, {"lessThan": "5.15.202", "status": "affected", "version": "5.15.153", "versionType": "semver"}, {"lessThan": "6.1.165", "status": "affected", "version": "6.1.83", "versionType": "semver"}, {"lessThan": "6.6.128", "status": "affected", "version": "6.6.23", "versionType": "semver"}, {"lessThan": "6.8", "status": "affected", "version": "6.7.11", "versionType": "semver"}, {"lessThan": "6.9", "status": "affected", "version": "6.8.2", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/iommu/intel/pasid.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.9"}, {"lessThan": "6.9", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.252", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.202", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.165", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.128", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.75", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.16", "versionType": "semver"}, {"lessThanOrEqual": "6.19.*", "status": "unaffected", "version": "6.19.6", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "F301F41A-824C-4760-91D6-829EA98625CE", "versionEndExcluding": "5.10.252", "versionStartIncluding": "5.10.214", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "117A1A1F-F0DE-44E4-B126-9D004FA22B98", "versionEndExcluding": "5.15.202", "versionStartIncluding": "5.15.153", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "ED05E435-2E50-4978-9EB7-7CD836BB7F33", "versionEndExcluding": "6.1.165", "versionStartIncluding": "6.1.83", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "700B618A-E90E-4922-BA41-8FCAD15AC28F", "versionEndExcluding": "6.6.128", "versionStartIncluding": "6.6.23", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "CD8383BB-B294-4F4D-996D-A780685E6362", "versionEndExcluding": "6.8", "versionStartIncluding": "6.7.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "2596BDC4-B8B0-4DD1-B529-FDCF124D0E31", "versionEndExcluding": "6.12.75", "versionStartIncluding": "6.8.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "B4B8CDA9-BADF-4CF5-8B3B-702DE8EEA40B", "versionEndExcluding": "6.18.16", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "373EEEDA-FAA1-4FB4-B6ED-DB4DD99DBE67", "versionEndExcluding": "6.19.6", "versionStartIncluding": "6.19", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode\n\nCommit 4fc82cd907ac (\"iommu/vt-d: Don't issue ATS Invalidation\nrequest when device is disconnected\") relies on\npci_dev_is_disconnected() to skip ATS invalidation for\nsafely-removed devices, but it does not cover link-down caused\nby faults, which can still hard-lock the system.\n\nFor example, if a VM fails to connect to the PCIe device,\n\"virsh destroy\" is executed to release resources and isolate\nthe fault, but a hard-lockup occurs while releasing the group fd.\n\nCall Trace:\n qi_submit_sync\n qi_flush_dev_iotlb\n intel_pasid_tear_down_entry\n device_block_translation\n blocking_domain_attach_dev\n __iommu_attach_device\n __iommu_device_set_domain\n __iommu_group_set_domain_internal\n iommu_detach_group\n vfio_iommu_type1_detach_group\n vfio_group_detach_container\n vfio_group_fops_release\n __fput\n\nAlthough pci_device_is_present() is slower than\npci_dev_is_disconnected(), it still takes only ~70 \u00b5s on a\nConnectX-5 (8 GT/s, x2) and becomes even faster as PCIe speed\nand width increase.\n\nBesides, devtlb_invalidation_with_pasid() is called only in the\npaths below, which are far less frequent than memory map/unmap.\n\n1. mm-struct release\n2. {attach,release}_dev\n3. set/remove PASID\n4. dirty-tracking setup\n\nThe gain in system stability far outweighs the negligible cost\nof using pci_device_is_present() instead of pci_dev_is_disconnected()\nto decide when to skip ATS invalidation, especially under GDR\nhigh-load conditions."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\niommu/vt-d: Vaciar dev-IOTLB solo cuando el dispositivo PCIe es accesible en modo escalable\n\nEl commit 4fc82cd907ac (\u2019iommu/vt-d: No emitir solicitud de invalidaci\u00f3n ATS cuando el dispositivo est\u00e1 desconectado\u2019) se basa en pci_dev_is_disconnected() para omitir la invalidaci\u00f3n ATS para dispositivos retirados de forma segura, pero no cubre la ca\u00edda de enlace causada por fallos, lo que a\u00fan puede bloquear el sistema de forma irreversible.\n\nPor ejemplo, si una VM no logra conectarse al dispositivo PCIe, se ejecuta \u2019virsh destroy\u2019 para liberar recursos y aislar el fallo, pero se produce un bloqueo irreversible mientras se libera el fd del grupo.\n\nTraza de llamadas:\n qi_submit_sync\n qi_flush_dev_iotlb\n intel_pasid_tear_down_entry\n device_block_translation\n blocking_domain_attach_dev\n __iommu_attach_device\n __iommu_device_set_domain\n __iommu_group_set_domain_internal\n iommu_detach_group\n vfio_iommu_type1_detach_group\n vfio_group_detach_container\n vfio_group_fops_release\n __fput\n\nAunque pci_device_is_present() es m\u00e1s lento que pci_dev_is_disconnected(), a\u00fan tarda solo ~70 \u00b5s en un ConnectX-5 (8 GT/s, x2) y se vuelve a\u00fan m\u00e1s r\u00e1pido a medida que aumentan la velocidad y el ancho de PCIe.\n\nAdem\u00e1s, devtlb_invalidation_with_pasid() se llama solo en las rutas siguientes, las cuales son mucho menos frecuentes que el mapeo/desmapeo de memoria.\n\n1. Liberaci\u00f3n de mm-struct\n2. {attach,release}_dev\n3. Establecer/eliminar PASID\n4. Configuraci\u00f3n de seguimiento de suciedad\n\nLa ganancia en estabilidad del sistema supera con creces el costo insignificante de usar pci_device_is_present() en lugar de pci_dev_is_disconnected() para decidir cu\u00e1ndo omitir la invalidaci\u00f3n ATS, especialmente bajo condiciones de alta carga de GDR."}], "id": "CVE-2026-43130", "lastModified": "2026-11-11T21:10:00.200", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-43130", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-06T15:29:00.364045Z", "version": "2.0.3"}}]}, "published": "2026-05-06T12:16:30.083", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/01aed2f1d7cb8fdf4c60c5bb4727608cb82b401d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0da6697e577023d8867c7beb2d16a22510e4eea9"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/10e60d87813989e20eac1f3eda30b3bae461e7f9"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/581ce094d9eafb78ec4f9de77bd24b780c151236"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/9813306610d0d718c863aaa70928bf57d7570ec0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/9deaacc8dcaddb6ddc5b52e1e63b457450ec0f94"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/e2c78c69f8faf2885ea4ceee08c71ac738f401a0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/ead67d0378e90f419e385a43af29435242d80c12"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode", "id": "2467214", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467214"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-367", "details": ["A flaw was found in the Linux kernel. When handling PCIe devices in scalable mode, the kernel may attempt to flush the device IOTLB (Input/Output Translation Lookaside Buffer) without verifying if the PCIe device is still accessible after a link-down fault. This improper handling during resource release, such as when a virtual machine is destroyed, can lead to a system hard-lock, resulting in a Denial of Service."], "name": "CVE-2026-43130", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-05-06T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-43130\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-43130\nhttps://lore.kernel.org/linux-cve-announce/2026050621-CVE-2026-43130-50f6@gregkh/T"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f873b85ec762c5a6abe94a7ddb31df5d3ba07d85,581ce094d9eafb78ec4f9de77bd24b780c151236)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d70f1c85113cd8c2aa8373f491ca5d1b22ec0554,e2c78c69f8faf2885ea4ceee08c71ac738f401a0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[34a7b30f56d30114bf4d436e4dc793afe326fbcf,ead67d0378e90f419e385a43af29435242d80c12)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2b74b2a92e524d7c8dec8e02e95ecf18b667c062,01aed2f1d7cb8fdf4c60c5bb4727608cb82b401d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4fc82cd907ac075648789cc3a00877778aa1838b,9813306610d0d718c863aaa70928bf57d7570ec0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4fc82cd907ac075648789cc3a00877778aa1838b,9deaacc8dcaddb6ddc5b52e1e63b457450ec0f94)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4fc82cd907ac075648789cc3a00877778aa1838b,0da6697e577023d8867c7beb2d16a22510e4eea9)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4fc82cd907ac075648789cc3a00877778aa1838b,10e60d87813989e20eac1f3eda30b3bae461e7f9)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "c04f2780919f20e2cc4846764221f5e802555868"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "025bc6b41e020aeb1e71f84ae3ffce945026de05"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.9"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.9)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.10.252,5.11.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.202,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.165,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.128,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.75,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.16,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.19.6,6.20.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-05-06T14:45:06.324677+00:00", "updated": "2026-05-08T21:00:10.225821+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}