Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-64591

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
06/08/2026
Última modificación:
06/08/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> iommu/vt-d: Avoid WARNING in sva unbind path<br /> <br /> The Intel IOMMU driver allows SVA on devices even if they do not support<br /> PCI/PRI. Commit 39c20c4e83b9 ("iommu/vt-d: Only handle IOPF for SVA when<br /> PRI is supported") modified the SVA bind path to allow this configuration<br /> by skipping IOPF enablement when PRI is missing. However, it failed to<br /> update the unbind path.<br /> <br /> This creates an imbalance: the unbind path attempts to disable IOPF for<br /> a device that never had it enabled, triggering a WARNING in<br /> intel_iommu_disable_iopf():<br /> <br /> WARNING: drivers/iommu/intel/iommu.c:3475 at intel_iommu_disable_iopf+0x4f/0x90d<br /> Call Trace:<br /> <br /> blocking_domain_set_dev_pasid+0x50/0x70<br /> iommu_detach_device_pasid+0x89/0xc0<br /> iommu_sva_unbind_device+0x73/0x150<br /> xe_vm_close_and_put+0x4d2/0x1200 [xe]<br /> <br /> Fix this by bypassing IOPF operations for SVA domains on non-PRI hardware<br /> in both the bind and unbind paths.

Impacto