Description
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the conditions of requesting ACS in detect_intel_iommu() don't include tboot, leading to a possible misconfiguration with ACS disabled (e.g. due to user opts) while iommu is later forced on by tboot_force_iommu(). Fix it by checking tboot in detect_intel_iommu().
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
5d990b627537e59a3a2f039ff588a4750e9c1a6a to < 579eb867d3da63f3b5e32f235925e1daa7ec70d0affected5d990b627537e59a3a2f039ff588a4750e9c1a6a to < aaeb81241e802c86be69394f72d49fde3f861fbbaffected5d990b627537e59a3a2f039ff588a4750e9c1a6a to < 45705a6bfdb283f7b3b509010fd617b72f942537affected5d990b627537e59a3a2f039ff588a4750e9c1a6a to < 87bc611c6c98a41c00feb7b06b0c297dd141a2aeaffected5d990b627537e59a3a2f039ff588a4750e9c1a6a to < 607432b2618b61df81134be0ef2562b8300c1216affected
Linux Linux
Default version status: affected
2.6.33affected0 to < 2.6.33unaffected6.6.157 to ≤ 6.6.*unaffected6.12.109 to ≤ 6.12.*unaffected6.18.50 to ≤ 6.18.*unaffected7.2.4 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/579eb867d3da63f3b5e32f235925e1daa7ec70d0 ↗
- https://git.kernel.org/stable/c/aaeb81241e802c86be69394f72d49fde3f861fbb ↗
- https://git.kernel.org/stable/c/45705a6bfdb283f7b3b509010fd617b72f942537 ↗
- https://git.kernel.org/stable/c/87bc611c6c98a41c00feb7b06b0c297dd141a2ae ↗
- https://git.kernel.org/stable/c/607432b2618b61df81134be0ef2562b8300c1216 ↗