Cloudanix VulnDB

CVE-2025-40058

None

CVSS

—

EPSS

0.2%

Published

Oct 28, 2025

CISA due date

—

The record

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoherent page walk Dirty page tracking relies on the IOMMU atomically updating the dirty bit in the paging-structure entry. For this operation to succeed, the paging- structure memory must be coherent between the IOMMU and the CPU. In another word, if the iommu page walk is incoherent, dirty page tracking doesn't work. The Intel VT-d specification, Section 3.10 "Snoop Behavior" states: "Remapping hardware encountering the need to atomically update A/EA/D bits in a paging-structure entry that is not snooped will result in a non- recoverable fault." To prevent an IOMMU from being incorrectly configured for dirty page tracking when it is operating in an incoherent mode, mark SSADS as supported only when both ecap_slads and ecap_smpwc are supported.

Affected packages

Ecosystem Package Introduced Fixed
AlmaLinux:10 kernel 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-64k 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-64k-core 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-64k-debug 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-64k-debug-core 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-64k-debug-devel 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-64k-debug-devel-matched 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-64k-debug-modules 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-64k-debug-modules-core 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-64k-debug-modules-extra 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-64k-devel 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-64k-devel-matched 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-64k-modules 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-64k-modules-core 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-64k-modules-extra 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-abi-stablelists 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-core 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-cross-headers 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-debug 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-debug-core 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-debug-devel 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-debug-devel-matched 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-debug-modules 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-debug-modules-core 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-debug-modules-extra 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-debug-uki-virt 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-devel 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-devel-matched 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-doc 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-headers 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-modules 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-modules-core 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-modules-extra 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-modules-extra-matched 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-64k 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-64k-core 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-64k-debug 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-64k-debug-core 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-64k-debug-devel 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-64k-debug-modules 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-64k-debug-modules-core 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-64k-debug-modules-extra 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-64k-devel 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-64k-modules 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-64k-modules-core 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-64k-modules-extra 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-core 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-debug 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-debug-core 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-debug-devel 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-debug-modules 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-debug-modules-core 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-debug-modules-extra 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-devel 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-modules 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-modules-core 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-rt-modules-extra 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-tools 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-tools-libs 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-tools-libs-devel 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-uki-virt 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-uki-virt-addons 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-zfcpdump 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-zfcpdump-core 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-zfcpdump-devel 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-zfcpdump-devel-matched 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-zfcpdump-modules 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-zfcpdump-modules-core 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 kernel-zfcpdump-modules-extra 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 libperf 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 perf 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 python3-perf 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 rtla 0 6.12.0-124.20.1.el10_1
AlmaLinux:10 rv 0 6.12.0-124.20.1.el10_1
AlmaLinux:9 kernel 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-64k 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-64k-core 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-64k-debug 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-64k-debug-core 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-64k-debug-devel 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-64k-debug-devel-matched 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-64k-debug-modules 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-64k-debug-modules-core 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-64k-debug-modules-extra 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-64k-devel 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-64k-devel-matched 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-64k-modules 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-64k-modules-core 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-64k-modules-extra 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-abi-stablelists 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-core 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-cross-headers 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-debug 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-debug-core 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-debug-devel 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-debug-devel-matched 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-debug-modules 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-debug-modules-core 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-debug-modules-extra 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-debug-uki-virt 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-devel 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-devel-matched 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-doc 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-headers 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-modules 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-modules-core 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-modules-extra 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-64k 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-64k-core 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-64k-debug 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-64k-debug-core 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-64k-debug-devel 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-64k-debug-modules 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-64k-debug-modules-core 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-64k-debug-modules-extra 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-64k-devel 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-64k-modules 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-64k-modules-core 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-64k-modules-extra 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-core 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-debug 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-debug-core 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-debug-devel 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-debug-modules 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-debug-modules-core 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-debug-modules-extra 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-devel 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-modules 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-modules-core 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-rt-modules-extra 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-tools 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-tools-libs 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-tools-libs-devel 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-uki-virt 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-uki-virt-addons 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-zfcpdump 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-zfcpdump-core 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-zfcpdump-devel 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-zfcpdump-devel-matched 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-zfcpdump-modules 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-zfcpdump-modules-core 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 kernel-zfcpdump-modules-extra 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 libperf 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 perf 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 python3-perf 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 rtla 0 5.14.0-611.11.1.el9_7
AlmaLinux:9 rv 0 5.14.0-611.11.1.el9_7
Linux Kernel 6.7.0 6.12.53
SUSE:Linux Enterprise High Availability Extension 15 SP6 kernel-default 0 6.4.0-150600.23.78.1
SUSE:Linux Enterprise High Availability Extension 15 SP7 kernel-default 0 6.4.0-150700.53.22.1
SUSE:Linux Enterprise Live Patching 15 SP6 kernel-default 0 6.4.0-150600.23.78.1
SUSE:Linux Enterprise Live Patching 15 SP6 kernel-livepatch-SLE15-SP6-RT_Update_17 0 1-150600.1.3.1
SUSE:Linux Enterprise Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_17 0 1-150600.13.5.1
SUSE:Linux Enterprise Live Patching 15 SP7 kernel-default 0 6.4.0-150700.53.22.1
SUSE:Linux Enterprise Live Patching 15 SP7 kernel-livepatch-SLE15-SP7_Update_6 0 1-150700.15.3.1
SUSE:Linux Enterprise Module for Basesystem 15 SP6 kernel-64kb 0 6.4.0-150600.23.78.1
SUSE:Linux Enterprise Module for Basesystem 15 SP6 kernel-default 0 6.4.0-150600.23.78.1
SUSE:Linux Enterprise Module for Basesystem 15 SP6 kernel-default-base 0 6.4.0-150600.23.78.1.150600.12.34.2
SUSE:Linux Enterprise Module for Basesystem 15 SP6 kernel-source 0 6.4.0-150600.23.78.1
SUSE:Linux Enterprise Module for Basesystem 15 SP6 kernel-zfcpdump 0 6.4.0-150600.23.78.1
SUSE:Linux Enterprise Module for Basesystem 15 SP7 kernel-64kb 0 6.4.0-150700.53.22.1
SUSE:Linux Enterprise Module for Basesystem 15 SP7 kernel-default 0 6.4.0-150700.53.22.1
SUSE:Linux Enterprise Module for Basesystem 15 SP7 kernel-default-base 0 6.4.0-150700.53.22.1.150700.17.15.1
SUSE:Linux Enterprise Module for Basesystem 15 SP7 kernel-source 0 6.4.0-150700.53.22.1
SUSE:Linux Enterprise Module for Basesystem 15 SP7 kernel-zfcpdump 0 6.4.0-150700.53.22.1
SUSE:Linux Enterprise Module for Development Tools 15 SP6 kernel-docs 0 6.4.0-150600.23.78.1
SUSE:Linux Enterprise Module for Development Tools 15 SP6 kernel-obs-build 0 6.4.0-150600.23.78.1
SUSE:Linux Enterprise Module for Development Tools 15 SP6 kernel-source 0 6.4.0-150600.23.78.1
SUSE:Linux Enterprise Module for Development Tools 15 SP6 kernel-syms 0 6.4.0-150600.23.78.1
SUSE:Linux Enterprise Module for Development Tools 15 SP7 kernel-docs 0 6.4.0-150700.53.22.1
SUSE:Linux Enterprise Module for Development Tools 15 SP7 kernel-obs-build 0 6.4.0-150700.53.22.1
SUSE:Linux Enterprise Module for Development Tools 15 SP7 kernel-source 0 6.4.0-150700.53.22.1
SUSE:Linux Enterprise Module for Development Tools 15 SP7 kernel-syms 0 6.4.0-150700.53.22.1
SUSE:Linux Enterprise Module for Legacy 15 SP6 kernel-default 0 6.4.0-150600.23.78.1
SUSE:Linux Enterprise Module for Legacy 15 SP7 kernel-default 0 6.4.0-150700.53.22.1
SUSE:Linux Enterprise Module for Public Cloud 15 SP6 kernel-azure 0 6.4.0-150600.8.55.1
SUSE:Linux Enterprise Module for Public Cloud 15 SP6 kernel-source-azure 0 6.4.0-150600.8.55.1
SUSE:Linux Enterprise Module for Public Cloud 15 SP6 kernel-syms-azure 0 6.4.0-150600.8.55.1
SUSE:Linux Enterprise Module for Public Cloud 15 SP7 kernel-azure 0 6.4.0-150700.20.18.1
SUSE:Linux Enterprise Module for Public Cloud 15 SP7 kernel-source-azure 0 6.4.0-150700.20.18.1
SUSE:Linux Enterprise Module for Public Cloud 15 SP7 kernel-syms-azure 0 6.4.0-150700.20.18.1
SUSE:Linux Enterprise Workstation Extension 15 SP6 kernel-default 0 6.4.0-150600.23.78.1
SUSE:Linux Enterprise Workstation Extension 15 SP7 kernel-default 0 6.4.0-150700.53.22.1
SUSE:Real Time Module 15 SP6 kernel-rt 0 6.4.0-150600.10.58.1
SUSE:Real Time Module 15 SP6 kernel-rt_debug 0 6.4.0-150600.10.58.1
SUSE:Real Time Module 15 SP6 kernel-source-rt 0 6.4.0-150600.10.58.1
SUSE:Real Time Module 15 SP6 kernel-syms-rt 0 6.4.0-150600.10.58.1
openSUSE:Leap 15.6 dtb-aarch64 0 6.4.0-150600.23.78.1
openSUSE:Leap 15.6 kernel-64kb 0 6.4.0-150600.23.78.1
openSUSE:Leap 15.6 kernel-azure 0 6.4.0-150600.8.55.1
openSUSE:Leap 15.6 kernel-debug 0 6.4.0-150600.23.78.1
openSUSE:Leap 15.6 kernel-default 0 6.4.0-150600.23.78.1
openSUSE:Leap 15.6 kernel-default-base 0 6.4.0-150600.23.78.1.150600.12.34.2
openSUSE:Leap 15.6 kernel-docs 0 6.4.0-150600.23.78.1
openSUSE:Leap 15.6 kernel-kvmsmall 0 6.4.0-150600.23.78.1
openSUSE:Leap 15.6 kernel-obs-build 0 6.4.0-150600.23.78.1
openSUSE:Leap 15.6 kernel-obs-qa 0 6.4.0-150600.23.78.1
openSUSE:Leap 15.6 kernel-rt 0 6.4.0-150600.10.58.1

Related vulnerabilities