CVE-2026-89448

CRITICAL
INFO Priority: 0.01 BB Relevance: 54/100
Published: 2026-09-11 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Auth No Interaction Conf. Impact Integ. Impact Scope Change

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: None
S: Changed
C: High
I: High
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detect_intel_iommu() don't include tboot, leading to a possible misconfiguration with ACS disabled (e.g. due to user opts) while iommu is later forced on by tboot_force_iommu(). Fix it by checking tboot in detect_intel_iommu().

Affected Software (7)

VendorProductVersion
Linux Linux 5d990b627537e59a3a2f039ff588a4750e9c1a6a < 3fd2b60ea9bd18348f5e971678f31041ef211047
Linux Linux 5d990b627537e59a3a2f039ff588a4750e9c1a6a < 579eb867d3da63f3b5e32f235925e1daa7ec70d0
Linux Linux 5d990b627537e59a3a2f039ff588a4750e9c1a6a < aaeb81241e802c86be69394f72d49fde3f861fbb
Linux Linux 5d990b627537e59a3a2f039ff588a4750e9c1a6a < 45705a6bfdb283f7b3b509010fd617b72f942537
Linux Linux 5d990b627537e59a3a2f039ff588a4750e9c1a6a < 87bc611c6c98a41c00feb7b06b0c297dd141a2ae
Linux Linux 5d990b627537e59a3a2f039ff588a4750e9c1a6a < 607432b2618b61df81134be0ef2562b8300c1216
Linux Linux 2.6.33

Bug Bounty Relevance

54 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

9.3 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS — Exploitation Probability

0.14%
Raw Score 0.001420
Percentile 3.5%
Date 2026-10-30

EPSS Trend

2026-10-30
0.00142
2026-10-29
0.00142

Intelligence Sources

mitre ref →
nvd ref →