CVE-2026-89448

CVE-2026-89448

Critical · published September 12, 2026

CVSS v3.1
9.3
EPSS
0%
Percentile
3.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iommu/vt-d: Force requesting ACS when tboot is enabled

Currently the conditions of requesting ACS in detect_intel_iommu()

don't include tboot, leading to a possible misconfiguration with ACS

disabled (e.g. due to user opts) while iommu is later forced on by

tboot_force_iommu().

Fix it by checking tboot in detect_intel_iommu().

The record
Technical detail
CVSS v3.1
9.3 · CRITICAL
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00142 · 3.2th percentile
Published
2026-09-12T00:19Z
References (5)
https://git.kernel.org/stable/c/45705a6bfdb283f7b3b509010fd617b72f942537 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/579eb867d3da63f3b5e32f235925e1daa7ec70d0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/607432b2618b61df81134be0ef2562b8300c1216 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/87bc611c6c98a41c00feb7b06b0c297dd141a2ae · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/aaeb81241e802c86be69394f72d49fde3f861fbb · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 13 SEP 03:23Z
    EPSS moved — → 0%
    epss
  • 11 SEP 19:43Z
    iommu/vt-d: Force requesting ACS when tboot is enabled
    cvelistv5