Riskcovery

CVE-2026-89448

iommu/vt-d: Force requesting ACS when tboot is enabled

State
Published
Severity
9.3 Critical
Published
Sep 11, 2026
Updated
Oct 30, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

iommu/vt-d: Force requesting ACS when tboot is enabled

Currently the conditions of requesting ACS in detect_intel_iommu() don't include tboot, leading to a possible misconfiguration with ACS disabled (e.g. due to user opts) while iommu is later forced on by tboot_force_iommu().

Fix it by checking tboot in detect_intel_iommu().

Scores

CVSSScoreVectorSource
3.19.3 CriticalCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5d990b627537e59a3a2f039ff588a4750e9c1a6a to before 3fd2b60ea9bd18348f5e971678f31041ef211047Affected
  • 5d990b627537e59a3a2f039ff588a4750e9c1a6a to before 579eb867d3da63f3b5e32f235925e1daa7ec70d0Affected
  • 5d990b627537e59a3a2f039ff588a4750e9c1a6a to before aaeb81241e802c86be69394f72d49fde3f861fbbAffected
  • 5d990b627537e59a3a2f039ff588a4750e9c1a6a to before 45705a6bfdb283f7b3b509010fd617b72f942537Affected
  • 5d990b627537e59a3a2f039ff588a4750e9c1a6a to before 87bc611c6c98a41c00feb7b06b0c297dd141a2aeAffected
  • 5d990b627537e59a3a2f039ff588a4750e9c1a6a to before 607432b2618b61df81134be0ef2562b8300c1216Affected
LinuxLinux
  • 2.6.33Affected
  • before 2.6.33Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.157 through 6.6.*Not affected
  • 6.12.109 through 6.12.*Not affected
  • 6.18.50 through 6.18.*Not affected
  • 7.2.4 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.