CVE-2026-74355

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the iommu/vt-d component where the info->node RB-tree member is zero-initialized via kzalloc. When a device does not support ATS (Address Translation Services), the device rbtree insert() call is skipped. If a subsequent probe step fails, the error path triggers device rbtree remove(), which misinterprets the zeroed node as a tree root, leading to corruption of the device RB-tree (a Red-Black tree, a self-balancing binary search tree).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.