CVE-2026-89448
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detect_intel_iommu() don't include tboot, leading to a possible misconfiguration with ACS disabled (e.g. due to user opts) while iommu is later forced on by tboot_force_iommu(). Fix it by checking tboot in detect_intel_iommu().
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.3
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- EPSS probability
- 0.14%
- Published
- 2026-09-11
- Last modified
- 2026-09-14
Affected products
- Linux Linux
- Linux Linux
- Linux Linux
- Linux Linux
- Linux Linux
- Linux Linux
- Linux Linux
- Linux Linux