CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's handling of Input-Output Memory Management Unit (IOMMU) configurations, specifically when Trusted Boot (tboot) is enabled. This oversight can lead to a misconfiguration where Access Control Services (ACS) may be inadvertently disabled, potentially exposing the system to security risks associated with improper isolation of devices. Organizations utilizing Linux systems with tboot enabled should prioritize this fix to ensure secure IOMMU configurations and maintain system integrity.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detect_intel_iommu() don't include tboot, leading to a possible misconfiguration with ACS disabled (e.g. due to user opts) while iommu is later forced on by tboot_force_iommu(). Fix it by checking tboot in detect_intel_iommu().