CVE-2026-64591
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
06/08/2026
Última modificación:
06/08/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
iommu/vt-d: Avoid WARNING in sva unbind path<br />
<br />
The Intel IOMMU driver allows SVA on devices even if they do not support<br />
PCI/PRI. Commit 39c20c4e83b9 ("iommu/vt-d: Only handle IOPF for SVA when<br />
PRI is supported") modified the SVA bind path to allow this configuration<br />
by skipping IOPF enablement when PRI is missing. However, it failed to<br />
update the unbind path.<br />
<br />
This creates an imbalance: the unbind path attempts to disable IOPF for<br />
a device that never had it enabled, triggering a WARNING in<br />
intel_iommu_disable_iopf():<br />
<br />
WARNING: drivers/iommu/intel/iommu.c:3475 at intel_iommu_disable_iopf+0x4f/0x90d<br />
Call Trace:<br />
<br />
blocking_domain_set_dev_pasid+0x50/0x70<br />
iommu_detach_device_pasid+0x89/0xc0<br />
iommu_sva_unbind_device+0x73/0x150<br />
xe_vm_close_and_put+0x4d2/0x1200 [xe]<br />
<br />
Fix this by bypassing IOPF operations for SVA domains on non-PRI hardware<br />
in both the bind and unbind paths.



