CVE-2026-90243

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the iommu/vt-d component where the copied context tear down() function zeroes a 128-bit context entry using context clear entry() while the Present bit remains set. Because the context-cache and IOTLB invalidations occur only after this process, a window is created where hardware may fetch a torn entry. This occurs because the compiler may reorder writes to the 64-bit halves of the entry, and hardware fetches are not guaranteed to be atomic. Additionally, the lack of a cacheline flush before invalidation means that on an IOMMU without coherent access to the context table, the zeroed entry might not be visible to hardware during invalidation, potentially leading to spurious faults or unpredictable behavior.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.