SECUFOCUSNOW
Home›CVE index›CVE-2026-45944
Review reviewHigh

CVE-2026-45944

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing down context entry When tearing down a context entry, the current implementation zeros the entire 128-bit entry using multiple 64-bit writes. This creates a window where the hardware can fetch a "torn" entry — where some fields are already zeroed while the 'Present' bit is still set — leading to unpredictable behavior or spurious faults. While x86 provides strong write ordering, the compiler may reorder writes to the two 64-bit halves of the context entry. Even without compiler r...

CVSS
7.5
EPSS
0.13%
2.72% percentile
CISA KEV
Not listed
Published
2026.05.27
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.13%
Technical severityCVSS 7.5

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing down context entry When tearing down a context entry, the current implementation zeros the entire 128-bit entry using multiple 64-bit writes. This creates a window where the hardware can fetch a "torn" entry — where some fields are already zeroed while the 'Present' bit is still set — leading to unpredictable behavior or spurious faults. While x86 provides strong write ordering, the compiler may reorder writes to the two 64-bit halves of the context entry. Even without compiler r...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= ba39592764ed20cee09aae5352e603a27bf56b0d < c716a59e9977d751e5eb54bcfa6a80124cb5067b, >= ba39592764ed20cee09aae5352e603a27bf56b0d < d2138abc8f0a7fce4101b7229b43b06811ed083d, >= ba39592764ed20cee09aae5352e603a27bf56b0d < a922dbafb4a674d958d702038232d09a30daf770, >= ba39592764ed20cee09aae5352e603a27bf56b0d < c1e4f1dccbe9d7656d1c6872ebeadb5992d0aaa2, >= 2.6.24, >= 2.6.24 < 6.18.14, >= 6.19 < 6.19.4
Fixed versions
6.18.14, 6.19.4

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CWE
Not available