Threats tagged 'ghsa-m67f-9cj9-483j'

CVE-2026-43130 is a medium severity vulnerability in the Linux kernel's iommu/vt-d subsystem. It involves improper flushing of dev-IOTLB when a PCIe device is inaccessible due to link faults, which can cause a system hard-lock. The issue occurs because the kernel incorrectly relies on pci_dev_is_disconnected() to skip ATS invalidation, which does not cover link-down faults. This can lead to a hard lockup during resource release operations such as when a VM fails to connect to a PCIe device and is forcibly destroyed. The fix involves using pci_device_is_present() instead, improving system stability with minimal performance impact.