Vulnerability Details CVE-2026-43220
In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: serialize sequence allocation under concurrent TLB invalidations
With concurrent TLB invalidations, completion wait randomly gets timed out
because cmd_sem_val was incremented outside the IOMMU spinlock, allowing
CMD_COMPL_WAIT commands to be queued out of sequence and breaking the
ordering assumption in wait_on_sem().
Move the cmd_sem_val increment under iommu->lock so completion sequence
allocation is serialized with command queuing.
And remove the unnecessary return.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 7.9%
CVSS Severity
CVSS v3 Score 5.5
Products affected by CVE-2026-43220
-
cpe:2.3:o:linux:linux_kernel:6.12.75
-
cpe:2.3:o:linux:linux_kernel:6.12.77
-
cpe:2.3:o:linux:linux_kernel:6.12.78
-
cpe:2.3:o:linux:linux_kernel:6.12.80
-
cpe:2.3:o:linux:linux_kernel:6.12.81
-
cpe:2.3:o:linux:linux_kernel:6.12.82
-
cpe:2.3:o:linux:linux_kernel:6.12.83
-
cpe:2.3:o:linux:linux_kernel:6.12.84
-
cpe:2.3:o:linux:linux_kernel:6.12.85
-
cpe:2.3:o:linux:linux_kernel:6.12.86
-
cpe:2.3:o:linux:linux_kernel:6.12.87
-
cpe:2.3:o:linux:linux_kernel:6.12.88
-
cpe:2.3:o:linux:linux_kernel:6.12.91
-
cpe:2.3:o:linux:linux_kernel:6.6.128
-
cpe:2.3:o:linux:linux_kernel:6.6.129
-
cpe:2.3:o:linux:linux_kernel:6.6.130
-
cpe:2.3:o:linux:linux_kernel:6.6.131
-
cpe:2.3:o:linux:linux_kernel:6.6.134
-
cpe:2.3:o:linux:linux_kernel:6.6.135
-
cpe:2.3:o:linux:linux_kernel:6.6.136
-
cpe:2.3:o:linux:linux_kernel:6.6.137
-
cpe:2.3:o:linux:linux_kernel:6.6.138
-
cpe:2.3:o:linux:linux_kernel:6.6.140
-
cpe:2.3:o:linux:linux_kernel:6.6.141