CVE-2026-64591
Received Received - Intake

IOMMU/vt-d SVA Unbind Path Warning Fix

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid WARNING in sva unbind path The Intel IOMMU driver allows SVA on devices even if they do not support PCI/PRI. Commit 39c20c4e83b9 ("iommu/vt-d: Only handle IOPF for SVA when PRI is supported") modified the SVA bind path to allow this configuration by skipping IOPF enablement when PRI is missing. However, it failed to update the unbind path. This creates an imbalance: the unbind path attempts to disable IOPF for a device that never had it enabled, triggering a WARNING in intel_iommu_disable_iopf(): WARNING: drivers/iommu/intel/iommu.c:3475 at intel_iommu_disable_iopf+0x4f/0x90d Call Trace: <TASK> blocking_domain_set_dev_pasid+0x50/0x70 iommu_detach_device_pasid+0x89/0xc0 iommu_sva_unbind_device+0x73/0x150 xe_vm_close_and_put+0x4d2/0x1200 [xe] Fix this by bypassing IOPF operations for SVA domains on non-PRI hardware in both the bind and unbind paths.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-06
Last Modified
2026-08-06
Generated
2026-08-06
AI Q&A
2026-08-06
EPSS Evaluated
N/A
NVD
CVE-2026-64591
EUVD
EUVD-2026-53778

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
intel linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves an imbalance in the IOMMU driver's SVA (Shared Virtual Addressing) handling for Intel devices. The bind path was updated to skip IOPF (I/O Page Fault) enablement when PRI (Page Request Interface) is missing, but the unbind path was not updated accordingly. This causes the unbind path to attempt disabling IOPF on devices where it was never enabled, triggering a WARNING in the kernel.

Detection Guidance

This vulnerability is specific to the Linux kernel's IOMMU driver and may trigger a WARNING message in the kernel logs when attempting to unbind an SVA domain on hardware without PRI support. Check kernel logs for messages like 'WARNING: drivers/iommu/intel/iommu.c:3475 at intel_iommu_disable_iopf'.

Impact Analysis

This vulnerability may cause kernel WARNING messages during device unbinding operations, which could lead to system logs being cluttered with non-critical warnings. It does not directly impact security or functionality but may affect system monitoring and debugging processes.

Mitigation Strategies

Apply the kernel patch that fixes the imbalance in the SVA bind and unbind paths. Update to a Linux kernel version that includes the fix for commit 39c20c4e83b9 or later.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64591. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart