AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-74355

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's IOMMU (Input-Output Memory Management Unit) subsystem, specifically in the handling of RB-trees during device probing. If a device fails to support Address Translation Services (ATS) and subsequent probe steps fail, the mishandling of the RB-tree can lead to corruption, potentially impacting system stability and device management. Organizations using Linux kernel versions susceptible to this issue, particularly those with complex device configurations, should prioritize applying the fix to prevent potential system instability.

CVE
CVE-2026-74355
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix RB-tree corruption in probe error path The info->node RB-tree member is zero-initialized via kzalloc. If a device does not support ATS, the device_rbtree_insert() call is skipped. If a subsequent probe step fails, the error path jumps to device_rbtree_remove(), which misinterprets the zeroed node as a tree root and corrupts the device RB-tree. Fix this by explicitly initializing the RB-node as empty using RB_CLEAR_NODE() during initialization and guarding the removal with RB_EMPTY_NODE().