SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-89448

CRITICAL · CVSS 9.3 EPSS 0.14%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-13

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of Input-Output Memory Management Unit (IOMMU) configurations, specifically when Trusted Boot (tboot) is enabled. This oversight can lead to a misconfiguration where Access Control Services (ACS) may be inadvertently disabled, potentially exposing the system to security risks associated with improper isolation of devices. Organizations utilizing Linux systems with tboot enabled should prioritize this fix to ensure secure IOMMU configurations and maintain system integrity.

CVE
CVE-2026-89448
Severity
CRITICAL
CVSS
9.3
EPSS
0.14%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detect_intel_iommu() don't include tboot, leading to a possible misconfiguration with ACS disabled (e.g. due to user opts) while iommu is later forced on by tboot_force_iommu(). Fix it by checking tboot in detect_intel_iommu().