8.2

CVE-2026-74355

iommu/vt-d: Fix RB-tree corruption in probe error path

In the Linux kernel, the following vulnerability has been resolved:

iommu/vt-d: Fix RB-tree corruption in probe error path

The info->node RB-tree member is zero-initialized via kzalloc. If
a device does not support ATS, the device_rbtree_insert() call is
skipped. If a subsequent probe step fails, the error path jumps to
device_rbtree_remove(), which misinterprets the zeroed node as
a tree root and corrupts the device RB-tree.

Fix this by explicitly initializing the RB-node as empty using
RB_CLEAR_NODE() during initialization and guarding the removal with
RB_EMPTY_NODE().
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version 4f1492efb495bcef34c9ee8a94af81e6cea5abf4
Version < f5102e0fc3c6dc8685549891a96e4589fdb3e211
Status affected
Version 4f1492efb495bcef34c9ee8a94af81e6cea5abf4
Version < d16923a45d4d08367650fdc3451c89299ab6ac5a
Status affected
Version 4f1492efb495bcef34c9ee8a94af81e6cea5abf4
Version < 43bd9e6d5513cb1edbafdeef146a1edc3aaced56
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 6.15
Status affected
Version 0
Version < 6.15
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.032
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.2 1.5 6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/f5102e0fc3c6dc8685549891a96e4589fdb3e211
https://git.kernel.org/stable/c/d16923a45d4d08367650fdc3451c89299ab6ac5a
https://git.kernel.org/stable/c/43bd9e6d5513cb1edbafdeef146a1edc3aaced56