CVEvulnerability
CVE-2026-89448
9.3 CRITICAL
Official page ↗
- Status
- Received
- Published
- 2026-09-11
- Last modified
- 2026-10-19
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
- 9.3 CRITICAL — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Description
In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d: Force requesting ACS when tboot is enabled
Currently the conditions of requesting ACS in detect_intel_iommu()
don't include tboot, leading to a possible misconfiguration with ACS
disabled (e.g. due to user opts) while iommu is later forced on by
tboot_force_iommu().
Fix it by checking tboot in detect_intel_iommu().
References
- https://git.kernel.org/stable/c/45705a6bfdb283f7b3b509010fd617b72f942537 git.kernel.org
- https://git.kernel.org/stable/c/579eb867d3da63f3b5e32f235925e1daa7ec70d0 git.kernel.org
- https://git.kernel.org/stable/c/607432b2618b61df81134be0ef2562b8300c1216 git.kernel.org
- https://git.kernel.org/stable/c/87bc611c6c98a41c00feb7b06b0c297dd141a2ae git.kernel.org
- https://git.kernel.org/stable/c/aaeb81241e802c86be69394f72d49fde3f861fbb git.kernel.org