01 Record

CVE-2026-43130

iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.12% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 2.4% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-05-06 11:27Z4 MO AGO

Last updated

2026-05-23 16:06Z3 MO AGO

Reserved

2026-05-01

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionBase

Data version

5.2

Document digest

fd5cc3b93cb5d2331e489f6111a35917aacfcab3704bd29b900e70f50327cec5

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxf873b85ec762c5a6abe94a7ddb31df5d3ba07d85 to < 581ce094d9eafb78ec4f9de77bd24b780c151236, d70f1c85113cd8c2aa8373f491ca5d1b22ec0554 to < e2c78c69f8faf2885ea4ceee08c71ac738f401a0, 34a7b30f56d30114bf4d436e4dc793afe326fbcf to < ead67d0378e90f419e385a43af29435242d80c12, 2b74b2a92e524d7c8dec8e02e95ecf18b667c062 to < 01aed2f1d7cb8fdf4c60c5bb4727608cb82b401d, 4fc82cd907ac075648789cc3a00877778aa1838b to < 9813306610d0d718c863aaa70928bf57d7570ec0, 4fc82cd907ac075648789cc3a00877778aa1838b to < 9deaacc8dcaddb6ddc5b52e1e63b457450ec0f94, 4fc82cd907ac075648789cc3a00877778aa1838b to < 0da6697e577023d8867c7beb2d16a22510e4eea9, 4fc82cd907ac075648789cc3a00877778aa1838b to < 10e60d87813989e20eac1f3eda30b3bae461e7f9, c04f2780919f20e2cc4846764221f5e802555868, 025bc6b41e020aeb1e71f84ae3ffce945026de05, 5.10.214 to < 5.10.252, 5.15.153 to < 5.15.202, 6.1.83 to < 6.1.165, 6.6.23 to < 6.6.128, 6.7.11 to < 6.8, 6.8.2 to < 6.9, 6.9—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/581ce094d9eafb78ec4f9de77bd24b780c151236
git.kernel.orghttps://git.kernel.org/stable/c/e2c78c69f8faf2885ea4ceee08c71ac738f401a0
git.kernel.orghttps://git.kernel.org/stable/c/ead67d0378e90f419e385a43af29435242d80c12
git.kernel.orghttps://git.kernel.org/stable/c/01aed2f1d7cb8fdf4c60c5bb4727608cb82b401d
git.kernel.orghttps://git.kernel.org/stable/c/9813306610d0d718c863aaa70928bf57d7570ec0
git.kernel.orghttps://git.kernel.org/stable/c/9deaacc8dcaddb6ddc5b52e1e63b457450ec0f94
git.kernel.orghttps://git.kernel.org/stable/c/0da6697e577023d8867c7beb2d16a22510e4eea9
git.kernel.orghttps://git.kernel.org/stable/c/10e60d87813989e20eac1f3eda30b3bae461e7f9

01 Record index

CVE-2026-43130

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-43130

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References